[nsp-sec] ACK 174 RE: rustock C&C
Shelton, Steve
sshelton at Cogentco.com
Tue Feb 3 13:27:32 EST 2009
ACK for 174 and Thanks!
Steve Shelton
Network Security Engineer
Cogent Communications
-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Beasley,
Jason
Sent: Tuesday, February 03, 2009 11:19 AM
To: nsp-security at puck.nether.net
Subject: [nsp-sec] rustock C&C
----------- nsp-security Confidential --------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Suresh over at Outblaze has identified what he believes to be an rustock
C&C existing at 69.10.44.210. From what I can tell, it appears he is
correct. I've compiled a listing of sources communicating to this
server. Please check the following list for your ASN:
http://drakul.nsc.xo.net/asns.txt
And then the full listing here for the hosts:
https://asn.cymru.com/nsp-sec/upload/1233681381.whois.txt
Timestamps are included.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
iD8DBQFJiIqaTU5wjr6ASAURAltgAJ0Sd7CbIlK5I99x9Wym821XSEb42ACdHtbn
j+Wdn3H9zNfUpo/rXxV1VnU=
=RP8n
-----END PGP SIGNATURE-----
_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security
Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________
More information about the nsp-security
mailing list