Custom Search

Tuesday, April 3, 2018

Suspected Bot List [2018-04-02]

detection period: 2018-04-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
CZ185.82.212.95Czech Republic
EG41.65.218.72Egypt
IN202.62.76.14India
KW37.34.243.227Kuwait
PK202.61.51.123Pakistan
RS178.149.102.210Serbia
SA212.76.76.242Saudi Arabia
SA213.181.172.244Saudi Arabia
TN196.234.189.16Tunisia
US97.80.15.138United States
VE190.202.116.101Venezuela

List from greylisting:

country codeIP addressCountry

List from SSH probes:

country codeIP addressCountry
AR179.62.18.55Argentina
BW41.223.142.211Botswana
CA216.13.179.108Canada
IN183.82.0.15India
MW196.216.8.110Malawi
NL78.41.207.224Netherlands
US75.136.156.134United States
US75.142.124.87United States
ZA160.124.208.6South Africa

No comments:

Post a Comment