Custom Search

Saturday, April 20, 2013

Suspected Bot List [2013-04-19]

detection period: 2013-04-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 628

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AE83.111.92.120Arab Emirates
AE194.170.149.21Arab Emirates
AL77.242.27.111Albania
AL82.114.70.102Albania
AO41.63.166.3Angola
BA87.250.99.210Bosnia And Herzegovina
BR150.161.30.7Brazil
BR177.137.0.123Brazil
CA70.38.37.207Canada
CI213.136.105.210Ivory Coast
CO190.0.60.238Colombia
DE62.113.213.202Germany
DE80.241.212.224Germany
DE84.11.89.66Germany
DZ41.221.30.242Algeria
EC186.42.182.5Ecuador
EE5.34.241.93Estonia
EU84.40.11.180European Union
GB77.246.20.2United Kingdom
GB83.218.130.114United Kingdom
GB89.105.3.212United Kingdom
GB93.93.129.119United Kingdom
GB109.200.12.166United Kingdom
GB146.185.31.170United Kingdom
GB188.227.161.46United Kingdom
GB193.164.207.16United Kingdom
GR78.87.9.40Greece
HN190.107.140.77Honduras
IN14.139.191.193India
IN61.1.33.177India
IN117.198.11.67India
IN117.211.91.147India
IN117.239.132.146India
IN117.240.239.120India
IN122.183.99.146India
IN122.252.237.34India
IN182.72.118.131India
IN182.73.111.162India
IN182.73.139.30India
IN202.63.105.226India
IN203.153.39.18India
IQ109.224.20.138Iraq
IR185.2.12.98Iran
IT213.149.213.37Italy
JO87.236.232.231Jordan
KW213.132.241.7Kuwait
MA41.214.129.22Morocco
MD95.65.86.236Republic Of Moldova
MN180.149.96.169Mongolia
MV202.21.182.26Republic of Maldives
MX177.227.88.125Mexico
MX177.228.74.54Mexico
MX187.141.185.118Mexico
MX187.162.207.98Mexico
MX187.174.173.18Mexico
MX189.198.198.35Mexico
MX189.198.207.148Mexico
MX200.33.20.40Mexico
MX200.57.144.81Mexico
MX200.76.63.75Mexico
MX201.159.106.90Mexico
NO80.202.250.41Norway
NZ202.169.192.130New Zealand
PA190.33.184.107Panama
PH121.97.26.86Philippines
PH124.104.141.204Philippines
PH202.124.193.11Philippines
PH210.16.60.5Philippines
PK116.58.48.141Pakistan
PK121.52.154.230Pakistan
PK202.69.45.52Pakistan
PK210.2.171.13Pakistan
RO78.97.216.93Romania
RO91.220.26.4Romania
RS84.22.61.190Serbia
RS89.216.30.165Serbia
RU77.74.13.26Russian Federation
RU178.213.33.95Russian Federation
SE91.95.40.3Sweden
SK195.168.85.26Slovakia
TJ217.11.177.26Tajikistan
TN41.230.10.190Tunisia
TN193.95.90.194Tunisia
TR82.222.189.43Turkey
TR188.132.237.61Turkey
UA82.207.51.92Ukraine
UA178.150.76.98Ukraine
US50.156.91.52United States
US50.194.150.131United States
US64.33.143.164United States
US66.55.82.17United States
US67.20.29.147United States
US67.236.113.226United States
US108.163.195.37United States
US108.178.57.120United States
US184.82.117.7United States
US192.30.84.153United States
US192.184.3.251United States
US198.105.222.136United States
US199.195.128.219United States
US204.13.205.98United States
US205.208.148.104United States
US206.190.158.235United States
US207.157.71.132United States
US208.89.209.81United States
US209.239.112.104United States
ZW41.57.125.190Zimbabwe

List from greylisting:
Read more »
Labels:
Posted by at No comments:

Botnet Statistics [2013-04-19]

detection period: 2013-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4323
number of botnet IPs notified to network operators: 3702
number of spam blocked: 117362
recipient count of spam blocked: 4033820

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here 10 days after its respective botnet statistics gets published.

Suspected Bots IP [2013-04-19]

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-JS721
2CHINANET-HE307
3BY-BELPAK-20091210181
4CHINANET-GD151
5CRTC132
6CTTNET62
7UNICOM-GD56
8HINET-NET53
9BY-BELPAK-2012033046
10KZ-KAZAKTELECOM-2008092336

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1927
2Belarus332
3United States292
4Ukraine162
5Kazakhstan155
6Russian Federation119
7Brazil111
8India79
9Taiwan70
10Peru67
Labels: ,
Posted by at No comments:

Friday, April 19, 2013

Suspected Bot List [2013-04-18]

detection period: 2013-04-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 730

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AE83.111.92.120Arab Emirates
AE94.200.108.10Arab Emirates
AE194.170.149.21Arab Emirates
AE194.170.149.75Arab Emirates
AL77.242.27.111Albania
AL82.114.70.102Albania
AM141.136.65.119Armenia
AO41.63.166.3Angola
BA87.250.99.210Bosnia And Herzegovina
BR150.161.30.7Brazil
BR177.137.0.123Brazil
BY212.98.187.147Belarus
CA70.38.37.207Canada
CO190.0.60.238Colombia
CZ77.104.244.69Czech Republic
DE62.113.213.202Germany
DE80.241.212.224Germany
DE84.11.89.66Germany
DZ41.221.30.242Algeria
DZ193.194.87.59Algeria
EC186.42.182.5Ecuador
EE5.34.241.93Estonia
EG196.218.229.14Egypt
EU84.40.11.180European Union
GB37.220.1.55United Kingdom
GB77.246.20.2United Kingdom
GB83.218.130.114United Kingdom
GB89.105.3.212United Kingdom
GB93.93.129.119United Kingdom
GB109.200.12.166United Kingdom
GB109.203.112.236United Kingdom
GB146.185.31.170United Kingdom
GB188.227.161.46United Kingdom
GB193.164.207.16United Kingdom
GE92.241.80.222Republic Of Georgia
GH212.96.12.199Ghana
GR78.87.9.40Greece
HN190.107.140.77Honduras
IN14.139.191.193India
IN59.96.66.2India
IN61.1.33.177India
IN117.198.11.67India
IN117.211.91.147India
IN117.239.132.146India
IN117.240.239.120India
IN122.180.96.110India
IN122.183.99.146India
IN122.252.237.34India
IN182.72.118.131India
IN182.73.111.162India
IN182.73.139.30India
IN202.63.105.226India
IN203.153.39.18India
IQ109.224.20.138Iraq
IR46.225.123.132Iran
IR185.2.12.98Iran
IT213.149.213.37Italy
JO87.236.232.231Jordan
KW213.132.241.7Kuwait
MA41.214.129.22Morocco
MD95.65.86.236Republic Of Moldova
MN180.149.96.169Mongolia
MV202.21.182.26Republic of Maldives
MX177.227.88.125Mexico
MX177.228.74.54Mexico
MX187.162.207.98Mexico
MX187.244.34.84Mexico
MX189.198.198.35Mexico
MX189.198.207.148Mexico
MX200.33.20.40Mexico
MX200.57.144.81Mexico
MX200.76.63.75Mexico
MX201.159.106.90Mexico
MX201.164.145.236Mexico
NG41.73.13.181Nigeria
NI186.1.10.154Nicaragua
NO80.202.250.41Norway
NO212.4.34.78Norway
NZ202.169.192.130New Zealand
PA190.33.184.107Panama
PH121.97.26.86Philippines
PH124.104.141.204Philippines
PH202.124.193.11Philippines
PH210.16.60.5Philippines
PK116.58.48.141Pakistan
PK121.52.154.230Pakistan
PK210.2.171.13Pakistan
RO91.220.26.4Romania
RS84.22.61.190Serbia
RS89.216.30.165Serbia
RS178.149.182.28Serbia
RU31.40.73.41Russian Federation
RU77.74.13.26Russian Federation
SK195.168.85.26Slovakia
TN41.230.10.190Tunisia
TN193.95.90.194Tunisia
TR82.222.171.203Turkey
TR82.222.189.43Turkey
TR89.145.185.42Turkey
TR188.132.237.61Turkey
UA82.207.51.92Ukraine
UA91.212.124.153Ukraine
US50.156.91.52United States
US50.194.150.131United States
US66.55.82.17United States
US67.20.29.147United States
US67.236.113.226United States
US69.163.34.54United States
US69.163.34.68United States
US69.163.34.70United States
US69.163.34.133United States
US108.163.195.37United States
US108.166.205.163United States
US108.178.57.120United States
US184.82.117.7United States
US184.82.120.190United States
US192.30.84.133United States
US192.30.84.153United States
US192.184.3.251United States
US199.87.232.69United States
US199.195.128.219United States
US199.231.87.225United States
US204.13.205.98United States
US205.208.148.104United States
US207.157.71.132United States
US208.89.209.81United States
US209.239.112.104United States

List from greylisting:
Read more »
Labels:
Posted by at No comments:
Subscribe to: Posts (Atom)