Custom Search

Thursday, September 3, 2015

Suspected Bot List [2015-09-02]

detection period: 2015-09-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.104.232.112Argentina
AR200.50.176.90Argentina
BO186.27.126.130Bolivia
BO186.27.127.129Bolivia
CR201.202.246.162Costa Rica
EC181.196.150.154Ecuador
EG193.227.49.83Egypt
IL213.57.90.10Israel
IN27.251.244.37India
IN59.90.91.95India
IN117.244.15.248India
IN125.16.12.146India
IN202.63.105.228India
MA41.137.19.3Morocco
MX201.116.227.163Mexico
RU5.19.139.21Russian Federation
SV201.247.149.77El Salvador
US24.181.221.172United States
US69.144.223.99United States
US184.167.56.70United States
ZA196.46.23.121South Africa
ZA197.221.4.244South Africa

List from greylisting:

country codeIP addressCountry
AM5.77.213.7Armenia
AR181.166.26.36Argentina
AR181.169.117.79Argentina
AR190.3.84.104Argentina
AR190.104.232.112Argentina
AR190.139.34.16Argentina
AR200.50.176.90Argentina
AR200.70.32.203Argentina
CO200.61.136.156Colombia
DZ41.103.255.120Algeria
EG193.227.49.83Egypt
ES87.235.177.251Spain
IN27.251.244.37India
IN59.90.91.95India
IN59.99.12.19India
IN59.99.74.218India
IN115.118.74.118India
IN117.216.155.164India
IN117.218.52.180India
IN117.218.118.245India
IN117.244.15.248India
IN125.16.12.146India
IN182.59.244.175India
IN182.70.28.20India
IN202.63.105.228India
IT95.224.155.240Italy
MX187.149.214.53Mexico
MX189.158.223.159Mexico
RS94.189.206.98Serbia
RU5.19.139.21Russian Federation
SV201.247.149.77El Salvador
TR5.46.216.129Turkey
TR31.155.151.253Turkey
TR95.65.137.20Turkey
US24.181.221.172United States
US69.144.223.99United States
US184.167.56.70United States
VE150.187.7.26Venezuela
ZA196.46.23.121South Africa
ZA197.221.4.244South Africa

Labels:
Posted by at No comments:

Botnet Statistics [2015-09-02]

detection period: 2015-09-02 00:00-23:59 UTC
total number of suspected botnet IPs: 2691
number of botnet IPs notified to network operators: 2644
number of spam blocked: 124095
recipient count of spam blocked: 3479428

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1049
2CHINANET-GD192
3UNICOM-ZJ134
4WASU125
5WASU-BB103
6CHINANET-JS84
7CHINANET-HN68
8CHINANET-SX58
9CHINANET-YN54
10CHINANET-SN42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1143
2Taiwan1055
3Viet Nam77
4United States74
5Brazil57
6Russian Federation35
7India21
8Ukraine20
9Germany15
10Indonesia13
Labels:
Posted by at No comments:

Wednesday, September 2, 2015

Suspected Bot List [2015-09-01]

detection period: 2015-09-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 85

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.104.232.112Argentina
BO186.27.126.130Bolivia
EC181.112.150.242Ecuador
EG193.227.49.83Egypt
IN182.72.139.50India
IN203.192.212.52India
MA41.137.19.3Morocco
RU5.19.139.21Russian Federation
SV201.247.149.77El Salvador
US69.144.223.99United States
US184.167.56.70United States

List from greylisting:

country codeIP addressCountry
AE217.165.164.75Arab Emirates
AL79.106.109.202Albania
AR181.29.133.29Argentina
AR186.62.173.219Argentina
AR190.104.232.112Argentina
AR190.174.11.17Argentina
AR190.221.150.234Argentina
AR200.50.176.90Argentina
CA173.209.129.174Canada
CZ95.46.240.202Czech Republic
DE80.153.15.115Germany
ES79.152.72.34Spain
ES87.235.177.251Spain
ES88.16.218.155Spain
ES213.96.220.196Spain
ES217.125.204.135Spain
GR62.38.54.150Greece
GR79.107.107.219Greece
GR91.140.84.105Greece
IE78.19.193.135Ireland
IN14.140.59.225India
IN27.5.179.129India
IN27.34.244.254India
IN59.95.228.13India
IN60.254.123.113India
IN61.0.105.48India
IN61.12.61.26India
IN101.0.54.219India
IN106.216.156.126India
IN117.193.229.158India
IN117.201.109.193India
IN117.205.211.5India
IN117.215.177.247India
IN117.217.164.147India
IN117.220.211.133India
IN117.221.189.53India
IN122.163.149.178India
IN122.164.219.85India
IN122.169.26.180India
IN122.177.157.1India
IN122.179.102.202India
IN182.64.213.112India
IN182.70.61.97India
IN203.192.212.52India
IT5.170.124.213Italy
IT95.224.155.240Italy
KW188.71.244.147Kuwait
MO180.94.175.155Macau
MX187.141.108.13Mexico
MX187.204.86.148Mexico
MX187.211.222.228Mexico
MX189.129.32.92Mexico
MX189.193.245.173Mexico
MX189.206.64.2Mexico
MX189.208.58.174Mexico
MX201.116.227.163Mexico
MX201.152.24.210Mexico
PK39.45.62.235Pakistan
PK39.55.147.29Pakistan
RO89.121.247.254Romania
RO109.99.73.97Romania
RU5.19.139.21Russian Federation
SV190.86.253.9El Salvador
TR212.15.24.2Turkey
TR213.248.128.37Turkey
TW118.233.211.110Taiwan
UA89.252.34.152Ukraine
US50.200.200.194United States
US69.144.223.99United States
US184.167.56.70United States
ZA105.210.195.84South Africa
ZA196.46.23.121South Africa
ZA197.221.4.244South Africa
ZW41.220.28.138Zimbabwe

Labels:
Posted by at No comments:
Subscribe to: Posts (Atom)