07/30/2010

fastflux domains very active on Belgian networks

New FastFlux bots in Belgium

Firstseen (UTC) IP address Hostname Lastseen (UTC) asnumber
2010-07-29 11:11:07 85.201.149.228 host-85-201-149-228.brutele.be 2010-07-29 18:45:25 12392
2010-07-26 12:11:15 82.212.143.87 82-212-143-87.teledisnet.be 2010-07-29 16:42:56 12392
2010-07-26 06:47:13 85.26.44.26 2010-07-26 08:56:47 12392
2010-07-26 01:20:49 85.201.113.77 host-85-201-113-77.brutele.be 2010-07-26 04:09:14 12392
2010-07-25 18:09:23 85.201.199.138 2010-07-25 18:09:37 12392
2010-07-25 18:07:36 213.189.171.55 host-213-189-171-55.brutele.be 2010-07-26 19:42:22 12392
2010-07-24 07:54:20 62.166.210.83 cust210-83.dsl.as47377.net 2010-07-26 22:41:53 13127
2010-07-23 18:40:32 85.201.171.227 host-85-201-171-227.brutele.be 12392
2010-07-18 13:34:17 84.193.163.113 d54C1A371.access.telenet.be 6848
2010-07-15 16:29:48 85.201.118.250 host-85-201-118-250.brutele.be 2010-07-15 16:37:48 12392
2010-07-15 12:55:37 85.26.83.75 2010-07-27 17:52:08 12392
2010-07-13 13:50:46 62.197.71.121 62-197-71-121.teledisnet.be 2010-07-28 20:14:36 12392
2010-07-13 11:50:16 213.213.222.147 host-213-213-222-147.brutele.be 2010-07-27 07:06:48 12392
2010-07-13 09:47:59 85.27.99.148 host-85-27-99-148.brutele.be 2010-07-28 14:38:23 12392
2010-07-13 09:32:52 85.201.225.3 2010-07-14 10:54:44 12392

00:20 | Permalink | Comments (1) | Email this | |  del.icio.us | | Digg! Digg |  Facebook

Trackbacks

The URL to Trackback this post is: http://belsec.skynetblogs.be/trackback/6121740

Comments

What tool(s)/service(s) do you use to track fastflux botnets?

Posted by: elhoim | 07/30/2010

Respond to this comment

The comments are closed.