Custom Search

Tuesday, March 6, 2018

Suspected Bot List [2018-03-05]

detection period: 2018-03-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR131.108.82.214Argentina
AR200.63.36.151Argentina
CZ185.82.212.95Czech Republic
EG41.65.218.72Egypt
PK202.61.51.123Pakistan
RS178.149.102.210Serbia
SA213.181.172.244Saudi Arabia

List from greylisting:

country codeIP addressCountry

List from SSH probes:

country codeIP addressCountry
SA95.218.78.150Saudi Arabia

No comments:

Post a Comment