Custom Search

Thursday, April 5, 2018

Suspected Bot List [2018-04-04]

detection period: 2018-04-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
CZ185.82.212.95Czech Republic
KW37.34.243.227Kuwait
PK202.61.51.123Pakistan
RS178.149.102.210Serbia
SA129.208.217.199Saudi Arabia
SA188.50.130.43Saudi Arabia
SA212.76.76.242Saudi Arabia
US97.80.15.138United States

List from greylisting:

country codeIP addressCountry

List from SSH probes:

country codeIP addressCountry
AR186.18.142.147Argentina
CA216.13.179.108Canada
ID114.7.177.103Indonesia
IN49.156.156.180India
IN122.165.204.152India

No comments:

Post a Comment