Custom Search

Monday, May 4, 2015

Suspected Bot List [2015-05-03]

detection period: 2015-05-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.108.35.2Argentina
AR190.120.123.2Argentina
CI213.136.105.210Ivory Coast
CI213.136.105.212Ivory Coast
CO200.80.43.248Colombia
EC201.219.60.86Ecuador
EC201.219.60.118Ecuador
ID202.137.230.220Indonesia
ID203.201.172.162Indonesia
MX201.116.227.163Mexico
NL178.21.118.159Netherlands
NL193.110.157.151Netherlands
US50.201.42.106United States
US66.240.236.121United States
US69.197.156.227United States
US174.45.152.26United States
US209.239.112.104United States

List from greylisting:

country codeIP addressCountry
AR190.188.253.117Argentina
GB176.254.0.94United Kingdom
JP153.122.23.1Japan
MA212.217.2.8Morocco
ME178.175.109.10Montenegro
US50.248.108.83United States
ZA105.208.14.211South Africa
ZA196.46.23.121South Africa

No comments:

Post a Comment