To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.
Suspected Bots IP [2016-10-01]
Suspected Bots IP [2016-10-02]
Suspected Bots IP [2016-10-03]
Suspected Bots IP [2016-10-04]
Suspected Bots IP [2016-10-05]
Suspected Bots IP [2016-10-06]
Suspected Bots IP [2016-10-07]
Suspected Bots IP [2016-10-08]
Suspected Bots IP [2016-10-09]
Suspected Bots IP [2016-10-10]
Suspected Bots IP [2016-10-11]
Suspected Bots IP [2016-10-12]
Suspected Bots IP [2016-10-13]
Suspected Bots IP [2016-10-14]
Suspected Bots IP [2016-10-15]
Suspected Bots IP [2016-10-16]
Suspected Bots IP [2016-10-17]
Suspected Bots IP [2016-10-18]
Suspected Bots IP [2016-10-19]
Suspected Bots IP [2016-10-20]
Suspected Bots IP [2016-10-21]
Suspected Bots IP [2016-10-22]
Suspected Bots IP [2016-10-23]
Suspected Bots IP [2016-10-24]
Suspected Bots IP [2016-10-25]
Suspected Bots IP [2016-10-26]
Suspected Bots IP [2016-10-27]
Suspected Bots IP [2016-10-28]
Suspected Bots IP [2016-10-29]
Suspected Bots IP [2016-10-30]
Suspected Bots IP [2016-10-31]
Custom Search
Tuesday, November 15, 2016
Suspected Bot List [2016-11-14]
detection period: 2016-11-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 93
List from greylisting:
number of suspected bots' IPs listed here: 93
IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.
List from fake open relays:
| country code | IP address | Country |
|---|---|---|
| AR | 190.191.64.42 | Argentina |
| BD | 58.147.173.36 | Bangladesh |
| BD | 202.5.37.132 | Bangladesh |
| CM | 41.223.30.251 | Cameroon |
| CV | 197.255.143.121 | Cape Verde |
| CV | 197.255.143.123 | Cape Verde |
| GA | 197.231.141.29 | Gabon |
| GA | 197.231.143.122 | Gabon |
| GE | 37.131.224.106 | Republic Of Georgia |
| IN | 59.145.146.94 | India |
| IN | 125.17.80.106 | India |
| IN | 125.99.255.146 | India |
| IN | 182.71.6.82 | India |
| IN | 182.71.16.154 | India |
| IN | 182.71.25.62 | India |
| IN | 182.71.118.138 | India |
| IN | 182.71.119.162 | India |
| IN | 182.72.25.86 | India |
| IN | 182.72.26.130 | India |
| IN | 182.72.36.34 | India |
| IN | 182.72.63.238 | India |
| IN | 182.72.89.138 | India |
| IN | 182.72.98.186 | India |
| IN | 182.72.100.238 | India |
| IN | 182.72.149.230 | India |
| IN | 182.72.158.134 | India |
| IN | 182.73.105.34 | India |
| IN | 182.73.149.126 | India |
| IN | 182.73.193.250 | India |
| IN | 182.73.245.86 | India |
| IN | 182.74.31.134 | India |
| IN | 182.74.50.70 | India |
| IN | 182.74.112.246 | India |
| IN | 182.74.173.58 | India |
| IN | 182.74.190.194 | India |
| IN | 182.74.203.226 | India |
| IN | 182.74.217.38 | India |
| IN | 182.74.232.178 | India |
| IN | 182.74.247.122 | India |
| IN | 182.75.19.2 | India |
| IN | 182.75.77.50 | India |
| IN | 182.75.107.222 | India |
| IN | 182.75.110.198 | India |
| IN | 182.75.114.174 | India |
| IN | 182.75.123.78 | India |
| IN | 182.75.205.202 | India |
| IN | 182.75.213.102 | India |
| IN | 182.76.1.182 | India |
| IN | 203.192.221.86 | India |
| IN | 203.192.221.87 | India |
| KG | 81.88.196.175 | Kyrgyzstan |
| NI | 190.124.32.202 | Nicaragua |
| NL | 213.34.69.164 | Netherlands |
| NL | 213.34.69.176 | Netherlands |
| PH | 203.115.141.251 | Philippines |
| PK | 110.36.32.105 | Pakistan |
| PK | 110.36.33.37 | Pakistan |
| PK | 110.36.35.128 | Pakistan |
| PK | 110.36.38.210 | Pakistan |
| PK | 110.36.63.25 | Pakistan |
| PK | 110.38.216.74 | Pakistan |
| PK | 110.38.217.60 | Pakistan |
| PK | 110.38.217.122 | Pakistan |
| PK | 110.38.217.133 | Pakistan |
| PK | 110.38.217.161 | Pakistan |
| PK | 110.38.217.162 | Pakistan |
| PK | 110.38.218.122 | Pakistan |
| PK | 110.38.219.211 | Pakistan |
| PK | 182.191.81.191 | Pakistan |
| RO | 89.165.156.233 | Romania |
| RU | 213.33.205.6 | Russian Federation |
| SC | 41.86.56.47 | Seychelles |
| SV | 179.5.32.178 | El Salvador |
| SV | 179.5.32.186 | El Salvador |
| SV | 179.5.32.190 | El Salvador |
| SV | 179.5.32.194 | El Salvador |
| SV | 179.5.33.10 | El Salvador |
| SV | 179.5.33.137 | El Salvador |
| SV | 179.5.33.190 | El Salvador |
| SV | 179.5.33.202 | El Salvador |
| UG | 137.63.129.23 | Uganda |
List from greylisting:
Botnet Statistics [2016-11-14]
detection period: 2016-11-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1191
number of botnet IPs notified to network operators: 1098
number of spam blocked: 13880
recipient count of spam blocked: 28773
The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:
The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:
total number of suspected botnet IPs: 1191
number of botnet IPs notified to network operators: 1098
number of spam blocked: 13880
recipient count of spam blocked: 28773
The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | WASU | 245 |
| 2 | CHINANET-HN | 111 |
| 3 | UNICOM-ZJ | 39 |
| 4 | BHARTI-IN | 38 |
| 5 | CMNET | 34 |
| 6 | CHINANET-HB | 26 |
| 7 | BSNLNET | 25 |
| 8 | UCOM-GPON | 24 |
| 9 | CHINANET-JS | 24 |
| 10 | UNICOM-JS | 21 |
The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:
| 1 | China | 747 |
| 2 | India | 78 |
| 3 | Antigua And Barbuda | 33 |
| 4 | Armenia | 24 |
| 5 | Russian Federation | 21 |
| 6 | Pakistan | 21 |
| 7 | Taiwan | 17 |
| 8 | Bangladesh | 15 |
| 9 | South Korea | 14 |
| 10 | Colombia | 13 |
Subscribe to:
Posts (Atom)