[nsp-sec] AS25 ACK Re: Morto worm C&C (RDP Scanner)

[Michael Sinatra]

ACK for AS25.

michael

On 08/30/11 11:29, Joel Rosenblatt wrote:
> ----------- nsp-security Confidential --------
>
>
>
>
> Hi,
>
> I found what looks like a Morto worm C&C on our network on the 25th - it
> was taken down, but the bots are still reporting in - see attached file
> for IPs
>
> Start time for IP's found 2011/08/26 14:09:29 -0500
> End time 2011/08/29 01:43:28 -0500
>
> Here are the ASNs found: