[nsp-sec] ACK: rustock C&C

[Andreas Lorentzen]

ACK for 15659

Andreas Lorentzen
NextGenTel

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Beasley,
Jason
Sent: Tuesday, February 03, 2009 7:19 PM
To: nsp-security at puck.nether.net
Subject: [nsp-sec] rustock C&C

----------- nsp-security Confidential --------


* PGP Signed by an unknown key

Suresh over at Outblaze has identified what he believes to be an rustock
C&C existing at 69.10.44.210.  From what I can tell, it appears he is
correct.  I've compiled a listing of sources communicating to this
server.  Please check the following list for your ASN:
http://drakul.nsc.xo.net/asns.txt
And then the full listing here for the hosts:
https://asn.cymru.com/nsp-sec/upload/1233681381.whois.txt
Timestamps are included.
 

* Unknown Key
* 0xBE804805(L)



_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________