[nsp-sec] ACK: rustock C&C
Rodolfo Baader
rbaader at arcert.gov.ar
Wed Feb 4 13:38:54 EST 2009
Hi !
Beasley, Jason wrote:
> ----------- nsp-security Confidential --------
>
> Suresh over at Outblaze has identified what he believes to be an rustock
> C&C existing at 69.10.44.210. From what I can tell, it appears he is
> correct. I've compiled a listing of sources communicating to this
> server. Please check the following list for your ASN:
> http://drakul.nsc.xo.net/asns.txt
> And then the full listing here for the hosts:
> https://asn.cymru.com/nsp-sec/upload/1233681381.whois.txt
> Timestamps are included.
>
ACK for AR ASNs: 7303, 10318, 10834, 11311, 11315, 13585, 14232, 17069, 19037,
22927, 27747, 27751
Notifications were sent to the abuse departments.
R.
More information about the nsp-security
mailing list