10/27/2008

Most active botnet command and control centers that use the port 80 (http)

A list of the most active control and command centers discovered by a network of honeypots

The list is updated and here is selection of only those that use the port 80.

If you are in a network all other ports should be closed to your users (except whitelisting) and dns and mail traffic should go through an internal relay server and not directly.

88.255.74.138            80   ##   TR:Turkey (1)
85.114.143.208          80   ##   DE:Germany (12)
85.114.137.60            80   ##   DE:Germany (49)

77.91.227.214            80   ##   EU: (1)
77.91.227.179            80   ##   EU: (11)

75.125.207.50            80   ##   ??:Unknown (1)
66.29.31.3                 80   ##   US:United States (3)
66.29.25.194              80   ##   US:United States (10)

66.116.125.150          80   ##   US:United States (1)

58.65.234.9               80   ##   HK:Hong Kong (1)

216.255.188.106        80   ##   US:United States (1)
216.255.182.242        80   ##   US:United States (1)
208.66.195.71            80   ##   US:United States (1)

194.54.90.246             80   ##   UA:Ukraine (835)
123.204.83.137            80   ##   TW:Taiwan (1)

13:29 | Permalink | Comments (0) | Email this | |  del.icio.us | | Digg! Digg |  Facebook

Post a comment