Custom Search

Sunday, July 22, 2018

Suspected Bot List [2018-07-21]

detection period: 2018-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

country codeIP addressCountry

List from SSH probes:

country codeIP addressCountry
AR170.210.136.3Argentina
AR181.168.27.94Argentina
AR190.113.153.172Argentina
AR201.231.10.180Argentina
BR150.162.11.229Brazil
CN193.112.10.59China
CN193.112.106.28China
CN193.112.47.154China
CN193.112.60.231China
CN193.112.69.117China
EC157.100.133.21Ecuador
EC181.199.106.20Ecuador
ID118.97.111.210Indonesia
ID118.97.84.234Indonesia
ID180.252.140.196Indonesia
ID36.66.164.143Indonesia
ID36.67.154.57Indonesia
ID36.89.119.92Indonesia
IN106.51.46.156India
IN106.51.72.240India
IN125.22.36.42India
IN182.79.223.194India
IN202.134.160.56India
IN59.145.89.79India
IR93.126.11.249Iran
KR165.132.105.42South Korea
MN103.9.90.178Mongolia
MW196.216.8.56Malawi
MX148.228.16.16Mexico
MX189.211.229.82Mexico
NG169.255.127.67Nigeria
PY181.40.66.68Paraguay
TG80.248.64.62Togo
TR212.156.115.58Turkey
TZ41.73.194.139Tanzania
US209.126.111.49United States

No comments:

Post a Comment