[nsp-sec] Critters are back in full swing irc . Indoirc . org CNAME irc . Dalnetwork . org

[Shelton, Steve]

Would expect an uptick in all RFI related activity and sure hoping they
do not do another Net wide sweep for FTP credentials as they did a few
years ago.

--- 04/13/11 12:16:43 Eastern Daylight Time

irc.indoirc.org	CNAME	irc.dalnetwork.org

irc.dalnetwork.org	A	76.242.100.234
irc.dalnetwork.org	A	78.110.50.119
irc.dalnetwork.org	A	173.203.214.163
irc.dalnetwork.org	A	174.143.145.67
irc.dalnetwork.org	A	174.143.145.70
irc.dalnetwork.org	A	174.143.154.185
irc.dalnetwork.org	A	174.143.159.229
irc.dalnetwork.org	A	198.63.210.70
irc.dalnetwork.org	A	212.92.8.23
irc.dalnetwork.org	A	216.227.213.121
irc.dalnetwork.org	A	217.7.63.50
irc.dalnetwork.org	A	50.56.112.129
irc.dalnetwork.org	A	74.126.25.19

3320    | 217.7.63.50      | DTAG Deutsche Telekom AG
7132    | 76.242.100.234   | SBIS-AS - AT&T Internet Services
8990    | 212.92.8.23      | AHRT-AS _ANTENNA HUNGARIA_ Magyar
Musorszoro es Radiohirkozlesi
12129   | 74.126.25.19     | 123NET - 123.Net, Inc.
14585   | 198.63.210.70    | CIFNET - CIFNet, Inc.
15244   | 216.227.213.121  | ADDD2NET-COM-INC-DBA-LUNARPAGES - Lunar
Pages
19994   | 50.56.112.129    | RACKSPACE - Rackspace Hosting
31240   | 78.110.50.119    | OLD-HT-SYSTEMS-AS JSC Hosting Telesystems
autonomous system
33070   | 173.203.214.163  | RMH-14 - Rackspace Hosting
33070   | 174.143.145.67   | RMH-14 - Rackspace Hosting
33070   | 174.143.145.70   | RMH-14 - Rackspace Hosting
33070   | 174.143.154.185  | RMH-14 - Rackspace Hosting
33070   | 174.143.159.229  | RMH-14 - Rackspace Hosting

One interesting channel:

#shadow 4 [+nt] [TARGET] :204.188.216.78: 

Steve Shelton
Sec Engineer
Cogent Communications
abuse at cogentco.com