[nsp-sec] rustock C&C

Gabriel Iovino giovino at ren-isac.net
Tue Feb 3 15:52:41 EST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Beasley, Jason wrote:
> I've compiled a listing of sources communicating to this
> server.  Please check the following list for your ASN:

Sanitized notifications will be sent to the following:

> 25      | 169.229.53.151   | UCB - University of California at Berkeley
> 25      | 169.229.53.169   | UCB - University of California at Berkeley
> 52      | 169.232.107.165  | UCLA - University of California, Los Angeles
> 186     | 136.242.107.54   | CUA-AS - The Catholic University of America
> 1968    | 207.159.162.130  | UMASSP-DOM - University of Massachusettes
> 2152    | 130.86.26.83     | CSUNET-NW - California State University Network
> 2939    | 167.7.160.72     | SCAROLINA-AS - State of South Carolina
> 3659    | 134.173.95.185   | CLAREMONT - The Claremont Colleges
> 4190    | 149.125.162.120  | BINGHAMTON-U - Binghamton University
> 4565    | 172.30.18.79     | MEGAPATH2-US - MegaPath Networks Inc.
> 7014    | 160.7.233.158    | XO-AS7014 - XO Communications
> 7014    | 160.7.238.64     | XO-AS7014 - XO Communications
> 7774    | 137.229.152.122  | ALASKA - University of Alaska
> 11351   | 136.224.254.123  | RR-NYSREGION-ASN-01 - Road Runner HoldCo LLC
> 13693   | 65.182.95.72     | NTS-ONLINE - NTS Communications
> 14325   | 198.7.242.166    | OSHEAN - Ocean State Higher Education and Administration Network
> 14348   | 131.128.123.195  | URI-AS - University of Rhode Island
> 14348   | 131.128.214.164  | URI-AS - University of Rhode Island
> 19342   | 131.194.238.13   | TRINITY-UNIVERSITY - Trinity University
> 21852   | 69.65.179.47     | DISNW1 - State Of Arkansas, Department of InformationSystems
> 21976   | 130.156.132.104  | NJEDGE-NET - NJEDge.Net, Inc.
> 26046   | 129.123.67.61    | USU-EDU - Utah State University

Thank you

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkmIrpkACgkQwqygxIz+pTuanQCgq/vAxQHaQCPu/v04ir0xODQP
o18An2x1OT7jWCc0JD5ofqmjncr4MK7r
=rs7f
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list