[nsp-sec] ping Telstra Internet

Steven Spence sspence at zianet.com
Wed May 21 22:45:17 EDT 2008


Not sure if anyone from Telstra Internet is on here or not but there is 
a box
over there serving up what looks to be botnet ddos code.

hxxp://144.131.145.199/d.pl

AS      | IP               | AS Name
1221    | 144.131.145.199  | ASN-TELSTRA Telstra Pty Ltd

 From a cursory glance at the code it looks like it is using Google to help
spread itself and has code for tcp and udp flooding in there.  It also looks
like it talks back to an IRC server at 195.14.47.164.

AS      | IP               | AS Name
8402    | 195.14.47.164    | CORBINA-AS Corbina Telecom

Steven






More information about the nsp-security mailing list