[nsp-sec] Kaiten Botnet C&C is still alive @ AS 8972 - PlusServer

[White, Gerard]

Greetings.

If anyone wants to take a crack at a Kaiten Botnet C&C... there's one
listening on TCP/113 @

AS      | IP               | AS Name
8972    | 85.25.86.52      | PLUSSERVER-AS PlusServer AG, Germany

Approx 250 Kaiten bots sitting on it.  Currently giving this /32 a UDP
Spankin'

AS      | IP               | AS Name
6389    | 65.13.143.4      | BELLSOUTH-NET-BLK - BellSouth.net Inc.


GW
855 - Aliant