[nsp-sec] rustock C&C

Beasley, Jason jason.beasley at xo.com
Tue Feb 3 13:19:10 EST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Suresh over at Outblaze has identified what he believes to be an rustock
C&C existing at 69.10.44.210.  From what I can tell, it appears he is
correct.  I've compiled a listing of sources communicating to this
server.  Please check the following list for your ASN:
http://drakul.nsc.xo.net/asns.txt
And then the full listing here for the hosts:
https://asn.cymru.com/nsp-sec/upload/1233681381.whois.txt
Timestamps are included.
 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFJiIqaTU5wjr6ASAURAltgAJ0Sd7CbIlK5I99x9Wym821XSEb42ACdHtbn
j+Wdn3H9zNfUpo/rXxV1VnU=
=RP8n
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list