[nsp-sec] history on irc.intelligence-tech.com

Jason Chambers jchambers at ucla.edu
Mon Feb 25 15:41:15 EST 2008


Hello all,

I've noticed in our recent infections that 8.14.145.68 is involved with 
a few.  Looking back at some past data, I see this botnet as far back as 
2007-03-04.

Anyone have any more information on this one ?

3356  | LEVEL3 Level 3 Communications  | 8.14.145.68     | tcp  | 25394 
| 2008-02-03 10:22:45 | 2008-02-11 10:22:45 | bot | 0 | 0 | ID: Int
Tech DNSRR: irc.intelligence-tech.com PORTS: 21958

3356  | LEVEL3 Level 3 Communications  | 8.14.145.68     | tcp  | 25394 
| 2007-03-04 09:49:52 | 2007-03-12 09:49:52 | bot | 0 | 0 | ID: Int
Tech DNSRR: irc.intelligence-tech.com PORTS: 21958_6667


Thanks,

-- 

Jason Chambers
UCLA
jchambers at ucla.edu
310-206-5603





More information about the nsp-security mailing list