Botnet Filter on ASA complaining about 63.251.179.49

[Ronald Nutter]

Anybody running the Botnet filter seeing this address ?

Anyone have any info on this ?

This is showing as a very high threat - Bot & Threat Networks.

Ron

[Parminder Sian]

Hi Ronald,

This IP is managed by United States                  Stateline                  Almar Networks Llc.

http://whois.domaintools.com/63.251.179.49

Hope this helps,

Sian

[clausonna · Accepted solution]

BTF says this is Conficker, but that data seems to be from 2009 and the IP address is no longer hosting anything.

VPNASA# dynamic-filter database find 63.251.179.49

63.251.179.49  m=WbnpConficker

Found 1 matches

Still, I would suggest investigating the host(s) that are initiating the requests - they might be infected.