[nsp-sec] Botnet C&C in AS30058 (ACTIVO) at FDCServers.NET

Carles Fragoso cfragoso at cesicat.cat
Thu May 20 06:29:21 EDT 2010

Previous message: [nsp-sec] Distributed SQL Injection attemps
Next message: [nsp-sec] Ongoing Attack
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

We have found some infected boxes connecting to IRC C&C at:

30058   | 204.45.13.154    | ACTIVO-SYSTEMS-AS30058 ACTIVO-SYSTEMS-AS30058
30058   | 204.45.6.194     | ACTIVO-SYSTEMS-AS30058 ACTIVO-SYSTEMS-AS30058

Regards,

-- Carlos

Previous message: [nsp-sec] Distributed SQL Injection attemps
Next message: [nsp-sec] Ongoing Attack
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the nsp-security mailing list