[nsp-sec] Morto worm C&C (RDP Scanner)

[Hicks, Howard]

ACK Qwest AS209
209     | 174.17.50.190    | ASN-QWEST - Qwest Communications Company, LLC
209     | 174.23.140.232   | ASN-QWEST - Qwest Communications Company, LLC
209     | 174.30.247.142   | ASN-QWEST - Qwest Communications Company, LLC
209     | 184.99.172.81    | ASN-QWEST - Qwest Communications Company, LLC
209     | 208.46.240.2     | ASN-QWEST - Qwest Communications Company, LLC
209     | 208.47.24.38     | ASN-QWEST - Qwest Communications Company, LLC
209     | 208.47.29.212    | ASN-QWEST - Qwest Communications Company, LLC
209     | 63.226.203.170   | ASN-QWEST - Qwest Communications Company, LLC
209     | 67.1.41.127      | ASN-QWEST - Qwest Communications Company, LLC
209     | 67.42.59.168     | ASN-QWEST - Qwest Communications Company, LLC
209     | 71.210.86.22     | ASN-QWEST - Qwest Communications Company, LLC
209     | 71.217.181.50    | ASN-QWEST - Qwest Communications Company, LLC
209     | 71.222.145.98    | ASN-QWEST - Qwest Communications Company, LLC
209     | 71.32.89.84      | ASN-QWEST - Qwest Communications Company, LLC
209     | 71.35.163.111    | ASN-QWEST - Qwest Communications Company, LLC
209     | 72.164.234.5     | ASN-QWEST - Qwest Communications Company, LLC
209     | 75.169.242.206   | ASN-QWEST - Qwest Communications Company, LLC
209     | 97.116.161.43    | ASN-QWEST - Qwest Communications Company, LLC
209     | 97.126.36.248    | ASN-QWEST - Qwest Communications Company, LLC
209     | 97.126.43.182    | ASN-QWEST - Qwest Communications Company, LLC
209     | 97.127.112.91    | ASN-QWEST - Qwest Communications Company, LLC

Proxy ACK Embarq
AS5778
AS6367
AS11530
AS14910
AS32855
5778    | 184.3.78.68      | EMBARQ-RCMT - Embarq Corporation
6367    | 71.51.96.58      | EMBARQ-KLLN - Embarq Corporation
11530   | 71.55.39.220     | EMBARQ-MNFD - Embarq Corporation
14910   | 67.236.98.45     | EMBARQ-FTMY - Embarq Corporation
14921   | 76.2.31.18       | EMBARQ-HDRV - Embarq Corporation
32855   | 67.234.107.125   | EMBARQ-NEBRASKA - Embarq Corporation
--

Howard Hicks

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-
> bounces at puck.nether.net] On Behalf Of Joel Rosenblatt
> Sent: Tuesday, August 30, 2011 1:29 PM
> To: nsp-security at puck.nether.net
> Subject: [nsp-sec] Morto worm C&C (RDP Scanner)
>
> ----------- nsp-security Confidential --------


This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.