[nsp-sec] Ping AS8001/AS36351 - possible botnet C&C

[Zoe O'Connell]

Ryan Pavely wrote:
>  ----------- nsp-security Confidential --------
>
>  ACK 8001.
>
>  64.21.149.167 is a loopback IP for a dedicated server leased by 
Russians.  I locked out the server and fwd'd a message off to our 
network/abuse staff.

Two more "master" C&Cs, one in AS8001...

8001    | 64.21.181.87     | NET-ACCESS-CORP - Net Access Corporation
36351   | 75.126.189.178   | SOFTLAYER - SoftLayer Technologies Inc.




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20080313/7924a11e/attachment-0001.sig>