[nsp-sec] ACK: rustock C&C

Rodolfo Baader rbaader at arcert.gov.ar
Wed Feb 4 13:38:54 EST 2009


Hi !

Beasley, Jason wrote:
> ----------- nsp-security Confidential --------
> 
> Suresh over at Outblaze has identified what he believes to be an rustock
> C&C existing at 69.10.44.210.  From what I can tell, it appears he is
> correct.  I've compiled a listing of sources communicating to this
> server.  Please check the following list for your ASN:
> http://drakul.nsc.xo.net/asns.txt
> And then the full listing here for the hosts:
> https://asn.cymru.com/nsp-sec/upload/1233681381.whois.txt
> Timestamps are included.
>  

ACK for AR ASNs: 7303, 10318, 10834, 11311, 11315, 13585, 14232, 17069, 19037,
22927, 27747, 27751

Notifications were sent to the abuse departments.

R.



More information about the nsp-security mailing list