Custom Search

Thursday, July 19, 2018

Suspected Bot List [2018-07-18]

detection period: 2018-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

country codeIP addressCountry

List from SSH probes:

country codeIP addressCountry
AR170.210.136.3Argentina
AR181.15.216.20Argentina
AR181.168.27.94Argentina
AR190.244.190.222Argentina
BR150.162.11.229Brazil
CN193.112.106.28China
CN193.112.60.231China
CN193.112.82.29China
CO190.7.154.106Colombia
DO186.120.187.234Dominican Republic
ID103.97.101.2Indonesia
ID114.4.192.253Indonesia
ID114.4.208.62Indonesia
ID118.97.111.210Indonesia
ID36.66.164.143Indonesia
IN122.15.119.41India
IN14.143.5.164India
KR165.132.105.42South Korea
KR165.132.148.127South Korea
NP202.166.206.166Nepal
PH119.93.161.232Philippines
PH122.3.179.114Philippines
PH122.53.59.246Philippines
PH210.5.120.234Philippines
RU85.142.80.142Russian Federation
SA213.230.13.237Saudi Arabia
SA87.101.176.49Saudi Arabia
TG80.248.64.62Togo
TZ41.73.194.139Tanzania
US129.158.66.2United States
US216.214.177.133United States
VE200.11.138.149Venezuela

No comments:

Post a Comment