Custom Search

Tuesday, April 8, 2014

Suspected Bot List [2014-04-07]

detection period: 2014-04-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.112.97.79Argentina
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
EG41.33.169.36Egypt
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN117.211.33.118India
IN117.247.241.27India
IN122.160.239.46India
IN202.62.67.250India
IN203.88.131.106India
IN203.90.114.228India
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
LB213.175.188.156Lebanon
LV46.183.220.29Latvia
MX201.158.203.50Mexico
PE181.64.27.10Peru
PL95.160.227.21Poland
RO212.146.101.154Romania
RS178.148.59.193Serbia
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TR195.226.221.155Turkey
TR195.244.39.195Turkey
TW119.77.133.52Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
US184.82.162.122United States
US204.152.209.195United States
ZA197.245.55.139South Africa

List from greylisting:

country codeIP addressCountry
AR190.105.232.210Argentina
BE193.53.4.184Belgium
CA209.183.143.52Canada
ES87.235.177.251Spain
ES195.77.245.40Spain
ES212.170.181.75Spain
GT200.30.144.9Guatemala
IN117.199.194.82India
IN117.240.44.22India
IT95.229.22.250Italy
NL5.255.93.154Netherlands
PE190.102.142.100Peru
PE200.121.22.158Peru
PY190.128.169.218Paraguay
RO81.12.235.142Romania
RS82.117.194.229Serbia
RU77.40.0.46Russian Federation
US66.188.33.190United States
US67.11.180.80United States
US71.7.113.119United States
US184.82.79.11United States

No comments:

Post a Comment