Top Botnet C&C Hosting-Netzwerke°!°

Szene IT-Security, Leaks & neue Bugs
1

Top Botnet C&C Hosting-Netzwerke°!°

Die folgende Tabelle zeigt das Top Botnet C&C Hosting-Netzwerk nach ASN.

Top-Botnet-C&C-Hosting-Netzwerke insgesamt (einschließlich Online- und Offline-Botnet-C&C-Server):

Rang ASN Land Botnet-C&Cs
1 AS5384 EMIRATES-INTERNET Emirates Internet -AE 304
2 AS577 BACOM -CA 248
3 AS2856 BT-UK-AS BTnet UK Regionales Netzwerk -GB 242
4 AS16276 OVH -FR 164
5 AS3215 France Telecom – Orange -FR 141
6 AS8151 Uninet SA de CV -MX 135
7 AS54290 HOSTWINDS -UNS 119
8 AS37705 TOPNET -TN 105
9 AS7922 COMCAST-7922 -UNS 103
10 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited -PK 95
11 AS8048 CANTV Servicios, Venezuela -VE 94
12 AS42298 GCC-MPLS-PEERING GCC MPLS-Peering -QA 88
13 AS14061 DIGITALOCEAN-ASN -DE 85
14 AS25019 SAUDINETSTC-AS -SA 82
15 AS53667 PONYNET -UNS 82

===============================================================================

Top Botnet C&C Hosting-Netzwerke, die aktive Botnet-Command & Control-Server hosten (nur Online-Botnet-C&C-Server zählen):

Rank ASN Country Botnet C&Cs
1 AS40021 NL-811-40021 - US 7
2 AS8100 ASN-QUADRANET-GLOBAL - US 4
3 AS51167 CONTABO - GB 2
4 AS31898 ORACLE-BMC-31898 - US 1
5 AS51167 CONTABO - DE 1
6 AS396073 MAJESTIC-HOSTING-01 - US 1
7 AS136170 EXBCOID-AS-AP PT. EXABYTES NETWORK INDONESIA - ID 1
8 AS23352 SERVERCENTRAL - US 1

===============================================================================

Browse Botnet C&Cs:

Firstseen (UTC) Host Malware Status Network (ASN) Country
2024-03-06 16:34:45 198.38.94.213 Pikabot Online AS23352 SERVERCENTRAL - US
2024-03-06 16:34:43 94.72.104.80 Pikabot Online AS51167 CONTABO - GB
2024-03-06 16:33:59 154.53.55.165 Pikabot Online AS40021 NL-811-40021 - US
2024-03-06 16:33:55 94.72.104.77 Pikabot Online AS51167 CONTABO - GB
2024-03-06 16:32:33 154.12.236.248 Pikabot Online AS40021 NL-811-40021 - US
2024-03-06 07:52:18 209.126.86.48 Pikabot Online AS40021 NL-811-40021 - US
2024-03-05 19:51:19 84.46.240.42 Pikabot Offline AS51167 CONTABO - DE
2024-03-01 07:52:04 65.20.73.169 Pikabot Offline AS20473 AS-CHOOPA - IN
2024-02-29 19:52:02 192.248.159.76 Pikabot Offline AS20473 AS-CHOOPA - GB
2024-02-19 16:32:25 109.199.99.131 Pikabot Offline AS51167 CONTABO - US
2024-02-19 16:12:23 154.12.233.66 Pikabot Online AS40021 NL-811-40021 - US
2024-02-19 16:12:21 154.38.175.241 Pikabot Offline AS40021 NL-811-40021 - US
2024-02-19 16:12:20 148.113.141.220 Pikabot Offline AS16276 OVH - CA
2024-02-19 16:12:18 89.117.23.186 Pikabot Online AS40021 NL-811-40021 - US
2024-02-19 16:12:15 145.239.135.24 Pikabot Offline AS16276 OVH - FR
2024-02-19 16:12:15 154.12.248.41 Pikabot Online AS40021 NL-811-40021 - US
2024-02-19 16:12:13 141.95.106.106 Pikabot Offline AS16276 OVH - FR
2024-02-19 16:12:13 57.128.165.176 Pikabot Offline AS16276 OVH - GB
2024-02-19 16:12:12 89.117.23.185 Pikabot Offline AS40021 NL-811-40021 - US
2024-02-19 16:12:09 89.117.23.34 Pikabot Offline AS40021 NL-811-40021 - US
2024-02-17 07:33:14 172.232.190.57 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2024-02-16 13:23:15 172.232.174.6 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2024-02-16 13:23:13 185.179.217.216 Pikabot Offline AS60781 LEASEWEB-NL-AMS-01 Netherlands - FR
2024-02-15 08:43:36 172.232.186.100 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2024-02-14 14:37:18 155.138.147.62 Pikabot Offline AS20473 AS-CHOOPA - CA
2024-02-14 14:27:38 172.232.162.97 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2024-02-14 14:27:36 172.232.189.10 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2024-02-14 14:27:34 45.32.21.184 Pikabot Offline AS20473 AS-CHOOPA - JP
2024-02-14 14:27:31 198.44.187.12 Pikabot Offline AS142032 HFTCL-AS-AP High Family Technology Co., Limited - US
2024-02-14 14:27:24 172.232.189.219 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2024-02-14 14:27:22 86.38.225.109 Pikabot Offline AS396073 MAJESTIC-HOSTING-01 - US
2024-02-14 14:27:18 95.179.135.3 Pikabot Offline AS20473 AS-CHOOPA - NL
2024-02-14 14:27:17 131.153.231.178 Pikabot Offline AS20454 SSASN2 - US
2024-02-14 10:12:11 104.156.233.235 Pikabot Offline AS20473 AS-CHOOPA - AU
2024-02-14 10:12:08 108.61.78.17 Pikabot Offline AS20473 AS-CHOOPA - US
2024-02-13 22:11:28 104.129.55.105 Pikabot Online AS8100 ASN-QUADRANET-GLOBAL - US
2024-02-13 22:11:26 103.82.243.5 Pikabot Online AS136170 EXBCOID-AS-AP PT. EXABYTES NETWORK INDONESIA - ID
2024-02-13 22:11:23 45.76.251.190 Pikabot Offline AS20473 AS-CHOOPA - US
2024-02-13 22:11:21 45.32.248.100 Pikabot Offline AS20473 AS-CHOOPA - JP
2024-02-13 22:11:18 104.129.55.106 Pikabot Online AS8100 ASN-QUADRANET-GLOBAL - US
2024-02-12 13:50:37 86.38.225.105 Pikabot Offline AS396073 MAJESTIC-HOSTING-01 - US
2024-02-12 13:50:35 86.38.225.106 Pikabot Online AS396073 MAJESTIC-HOSTING-01 - US
2024-02-12 13:50:33 86.38.225.108 Pikabot Offline AS396073 MAJESTIC-HOSTING-01 - US
2024-02-09 16:29:53 37.60.242.86 Pikabot Offline AS51167 CONTABO - US
2024-02-09 16:29:53 23.226.138.161 Pikabot Online AS8100 ASN-QUADRANET-GLOBAL - US
2024-02-09 16:29:51 23.226.138.143 Pikabot Online AS8100 ASN-QUADRANET-GLOBAL - US
2024-02-09 06:56:00 178.18.246.136 Pikabot Online AS51167 CONTABO - DE
2024-02-08 19:51:01 104.129.55.103 Pikabot Offline AS8100 ASN-QUADRANET-GLOBAL - US
2024-02-08 19:50:57 158.220.80.157 Pikabot Offline AS51167 CONTABO - GB
2024-02-08 19:50:56 65.20.66.218 Pikabot Offline AS20473 AS-CHOOPA - IN
2024-02-08 19:50:54 95.179.191.137 Pikabot Offline AS20473 AS-CHOOPA - NL
2024-02-08 19:50:53 37.60.242.85 Pikabot Offline AS51167 CONTABO - US
2024-02-08 19:50:52 104.129.55.104 Pikabot Offline AS8100 ASN-QUADRANET-GLOBAL - US
2024-02-08 19:50:50 139.84.237.229 Pikabot Offline AS20473 AS-CHOOPA - ZA
2024-02-08 19:20:49 85.239.243.155 Pikabot Online AS40021 NL-811-40021 - US
2024-02-08 19:20:47 158.220.80.167 Pikabot Offline AS51167 CONTABO - GB
2024-01-30 06:53:28 62.204.41.234 QakBot Offline AS59425 HORIZONMSK-AS - RU
2024-01-29 18:53:27 185.113.8.123 QakBot Offline AS200019 ALEXHOST - NL
2024-01-27 06:53:31 77.73.39.175 QakBot Offline AS61251 HOST4BIZ-AS - PL
2024-01-26 14:03:33 77.73.39.175 QakBot Offline AS61251 HOST4BIZ-AS - PL
2024-01-26 14:03:33 116.202.110.87 QakBot Offline AS24940 HETZNER-AS - DE
2024-01-25 20:38:33 146.70.158.28 QakBot Offline AS9009 M247 - FR
2024-01-25 20:38:32 185.117.90.142 QakBot Offline AS59711 HZ-EU-AS - NL
2024-01-22 20:33:29 188.116.26.246 QakBot Offline AS58061 SCALAXY-AS - NL
2024-01-17 18:58:28 95.215.108.41 QakBot Offline AS207713 GIR-AS - RU
2024-01-17 18:58:25 185.117.90.142 QakBot Offline AS59711 HZ-EU-AS - NL
2023-12-26 18:59:52 37.252.6.219 QakBot Offline AS200088 ARTNET2 - PL
2023-12-23 08:32:01 85.239.243.3 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-22 04:20:39 5.149.249.185 QakBot Offline AS59711 HZ-EU-AS - NL
2023-12-21 17:09:13 109.123.227.158 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - AU
2023-12-21 16:05:12 109.123.227.174 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - AU
2023-12-21 16:05:08 154.38.164.50 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-21 16:05:07 85.239.237.153 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-21 16:05:04 109.123.227.147 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - AU
2023-12-21 16:05:00 109.123.227.170 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - AU
2023-12-21 16:04:55 5.180.151.180 Pikabot Offline AS40021 NL-811-40021 - GB
2023-12-21 16:04:54 154.38.185.136 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-21 16:04:52 5.180.151.194 Pikabot Offline AS40021 NL-811-40021 - GB
2023-12-21 13:03:58 109.123.227.166 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - AU
2023-12-21 13:03:10 144.91.113.0 Pikabot Offline AS51167 CONTABO - DE
2023-12-21 07:52:15 109.123.227.167 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - AU
2023-12-21 07:00:35 95.215.108.41 QakBot Offline AS207713 GIR-AS - RU
2023-12-20 19:52:19 89.117.55.179 Pikabot Offline AS51167 CONTABO - DE
2023-12-20 17:52:17 89.117.55.178 Pikabot Offline AS51167 CONTABO - DE
2023-12-20 17:52:16 154.38.185.135 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-20 17:52:15 46.250.253.58 Pikabot Offline AS141995 CAPL-AS-AP Contabo Asia Private Limited - GB
2023-12-20 17:52:11 154.38.185.138 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-20 17:52:10 185.187.235.158 Pikabot Offline AS40021 NL-811-40021 - NL
2023-12-20 17:52:08 172.232.189.134 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2023-12-20 17:52:06 154.38.185.132 Pikabot Offline AS40021 NL-811-40021 - US
2023-12-20 11:53:54 149.28.252.250 Pikabot Offline AS20473 AS-CHOOPA - US
2023-12-20 11:53:12 216.128.151.26 Pikabot Offline AS20473 AS-CHOOPA - US
2023-12-20 08:23:36 104.207.143.168 Pikabot Offline AS20473 AS-CHOOPA - US
2023-12-19 19:00:33 109.107.181.8 QakBot Offline AS210644 AEZA-AS - DE
2023-12-19 19:00:32 116.203.56.11 QakBot Offline AS24940 HETZNER-AS - DE
2023-12-19 07:46:21 78.141.223.212 Pikabot Offline AS20473 AS-CHOOPA - NL
2023-12-18 22:00:11 216.238.79.12 Pikabot Offline AS20473 AS-CHOOPA - MX
2023-12-18 22:00:09 155.138.140.156 Pikabot Offline AS20473 AS-CHOOPA - CA
2023-12-18 22:00:07 172.232.188.4 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US
2023-12-18 22:00:05 45.33.15.215 Pikabot Offline AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud - US

Quelle: https://abuse.ch

Feodo Tracker bietet folgende Feeds:

  • Botnet C2 IP-Blocklist (CSV)

  • Suricata Botnet C2 IP-Regelsatz

1 „Gefällt mir“
2

der suricata regelsatz ist echt empfehlenswert! obwohl mir der mitentwickler von abuse.ch nicht wirklich gefällt, aber gut, sei es drum…
→ SpamHaus

3

Ach meine Freunde von Spamhaus. :wink:

4

Werden von abuse.ch aber nur genutzt, weil die ihre Infra zur Verfügung stellen, um halt die Regelsätze aufstellen und in Echtzeit aktualisieren zu können! ^^