[nsp-sec] Botnet at 98.126.44.98 tcp/8100 (AS35908)

Carles Fragoso cfragoso at cesicat.cat
Sun Dec 12 15:46:25 EST 2010


Hi guys,

We have identified a botnet C&C at ...

>  IP:			98.126.44.98 
>  Port: 		tcp/8100
>  Channels:	#n  #Ma
>  Topic: 		hxxp://74.63.78.13/naax.exe|.asc exp_all 25 5 0 -a -r -e|.asc exp_all 25 5 0 -b -r -e|.asc exp_all 20 5 0 -b|.asc exp_all 20 5 0 -c|.asc exp_all 10 5 a -a


> AS      | IP               | AS Name
> 35908   | 98.126.44.98     | VPLSNET - VPLS Inc. d/b/a Krypt Technologies

Warm regards,

-- Carlos



More information about the nsp-security mailing list