[nsp-sec] conficker list

[Klaus Moeller]

Hi,

Am Mittwoch, 14. Januar 2009 19:52:57 schrieb Smith, Donald:
> A source that wishes to remain anonymous provided me apache logs for one
> of the systems conficker checks in with or downloads from. Beth Young at
> more.net also has a list and has offered to cross check these against her
> known infected systems.

> Timezone is GMT -8:00
> https://asn.cymru.com/nsp-sec/upload/1231957075.whois.txt

> https://asn.cymru.com/nsp-sec/upload/1231958296.whois.txt

ACK, AS 680, 553, 12816, 20633, 29484, 34878

Our incident number is: DFN-CERT#64842

Best regards,
                Klaus Möller, DFN-CERT

-- 
Dipl. Inform. Klaus Moeller (Incident Response Team)
Phone: +49 40 808077-555, Fax: +49 40 808077-556

DFN-CERT Services GmbH, https://www.dfn-cert.de,  Phone  +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805,  Ust-IdNr.:  DE 232129737
Sachsenstrase 5, 20097 Hamburg/Germany, CEO: Dr. Klaus-Peter Kossakowski

                      16. DFN-Workshop Sicherheit in vernetzten Systemen
                                         https://www.dfn-cert.de/ws2009/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 486 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090115/ef025e09/attachment-0001.sig>