cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

927
Views
0
Helpful
2
Replies
Highlighted
Beginner

Botnet Filter on ASA complaining about 63.251.179.49

Anybody running the Botnet filter seeing this address ?

Anyone have any info on this ?

This is showing as a very high threat - Bot & Threat Networks.

Ron

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Participant

Botnet Filter on ASA complaining about 63.251.179.49

BTF says this is Conficker, but that data seems to be from 2009 and the IP address is no longer hosting anything.

VPNASA# dynamic-filter database find 63.251.179.49

63.251.179.49  m=WbnpConficker

Found 1 matches

Still, I would suggest investigating the host(s) that are initiating the requests - they might be infected. 

View solution in original post

2 REPLIES 2
Highlighted
Beginner

Botnet Filter on ASA complaining about 63.251.179.49

Hi Ronald,

This IP is managed by United States                  Stateline                  Almar Networks Llc.

http://whois.domaintools.com/63.251.179.49

Hope this helps,

Sian

Highlighted
Participant

Botnet Filter on ASA complaining about 63.251.179.49

BTF says this is Conficker, but that data seems to be from 2009 and the IP address is no longer hosting anything.

VPNASA# dynamic-filter database find 63.251.179.49

63.251.179.49  m=WbnpConficker

Found 1 matches

Still, I would suggest investigating the host(s) that are initiating the requests - they might be infected. 

View solution in original post