10/27/2008
Most active botnet command and control centers that use the port 80 (http)
A list of the most active control and command centers discovered by a network of honeypots
The list is updated and here is selection of only those that use the port 80.
If you are in a network all other ports should be closed to your users (except whitelisting) and dns and mail traffic should go through an internal relay server and not directly.
88.255.74.138 80 ## TR:Turkey (1)
85.114.143.208 80 ## DE:Germany (12)
85.114.137.60 80 ## DE:Germany (49)
77.91.227.214 80 ## EU: (1)
77.91.227.179 80 ## EU: (11)
75.125.207.50 80 ## ??:Unknown (1)
66.29.31.3 80 ## US:United States (3)
66.29.25.194 80 ## US:United States (10)
66.116.125.150 80 ## US:United States (1)
58.65.234.9 80 ## HK:Hong Kong (1)
216.255.188.106 80 ## US:United States (1)
216.255.182.242 80 ## US:United States (1)
208.66.195.71 80 ## US:United States (1)
194.54.90.246 80 ## UA:Ukraine (835)
123.204.83.137 80 ## TW:Taiwan (1)
13:29 | Permalink | Comments (0) | Email this
|
|
del.icio.us
|
|
Digg |
Facebook




Post a comment