[nsp-sec] ack 1103: Bitcoin Miner/BadMiner - Live Peer list
Wim Biemolt
Wim.Biemolt at surfnet.nl
Wed Aug 31 04:12:30 EDT 2011
On 31/08/2011 03:04, Nicholas Ianelli wrote:
> ----------- nsp-security Confidential --------
>
> Folks,
>
> Below is the active peer list of bots infected with the BadMiner
> malware (IP addresses that permit external access). The current active
> peers amounts to 7381, while the total number of peers being shared is
> over 49K.
>
> Additional details can be found here:
>
> http://www.securelist.com/en/blog/208193084/The_Miner_Botnet_Bitcoin_Mining_Goes_Peer_To_Peer
>
> http://www.symantec.com/business/security_response/writeup.jsp?docid=2011-081115-5847-99
>
> The data was acquired on 20110830 starting at roughly 1900GMT.
>
> Feel free to pass on/utilize as you see fit. Please ensure you remove
> any personal or list attribution prior to distribution.
>
> Cheers,
> Nick
>
> https://asn.cymru.com/nsp-sec/upload/1314752016.whois.txt
>
> 1103 | 145.120.9.181 | 145.120.8.0/21 | EU | ripencc |
> 1993-09-01 | SURFNET-NL SURFnet, The Netherlands
ack. Thanks for sharing.
Cheers,
-Wim -/- SURFcert
More information about the nsp-security
mailing list