Custom Search

Sunday, August 12, 2018

Suspected Bot List [2018-08-11]

detection period: 2018-08-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

country codeIP addressCountry

List from SSH probes:

country codeIP addressCountry
AR179.40.114.8Argentina
AR181.15.216.20Argentina
AR181.46.72.9Argentina
AR201.235.245.224Argentina
AR201.251.63.115Argentina
BE57.100.3.155Belgium
BW168.167.30.198Botswana
BW41.223.142.211Botswana
CA167.114.109.165Canada
CN193.112.100.20China
CN193.112.143.195China
CN193.112.170.56China
CN193.112.49.145China
DE213.183.168.69Germany
DO186.120.187.234Dominican Republic
EC157.100.133.21Ecuador
ET197.156.88.195Ethiopia
FR176.191.183.185France
GH129.122.16.156Ghana
ID118.97.22.161Indonesia
ID180.250.115.98Indonesia
ID180.250.16.42Indonesia
ID180.250.172.234Indonesia
ID36.89.130.58Indonesia
IN106.51.226.154India
IN125.16.239.75India
IN182.79.223.194India
MA41.137.104.50Morocco
NG41.86.155.4Nigeria
NL185.244.25.144Netherlands
PH202.126.46.39Philippines
PL188.146.237.251Poland
SC45.199.182.242Seychelles
US208.45.186.203United States
US209.126.111.49United States
US216.214.177.133United States

No comments:

Post a Comment