[nsp-sec] Hlux/Kelihos p2p botnet sinkhole ... some results - part one
Stéphane Dodeller
dodeller at ip-plus.net
Tue Oct 4 05:37:52 EDT 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Dear all,
>
> Attached part one (asn <= 12334) of the hosts that showed up on the
> Hlux/Kelihos p2p botnet sinkhole. The machines are all infected with
> the Hlux bot and should be cleaned. The timestamps are in GMT, with
> nanosecond resolution.
>
Hi Wim,
ACK (and Thanks!) for AS3303 and AS44038.
Regards
Stéphane Dodeller
Swisscom/IP-Plus Engineering
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
iQEcBAEBAgAGBQJOitPxAAoJEOSB/9UpeWIULUUH/RSmEn9ZgKXUs6frMkOe1vbZ
iYT02xq+2kq/U+IsjKGqPLTVN9fR+alN+e3JAHHJg9rxYMwd0QE1UVmOWaErswye
hCQuqgJQqF2p1GnVd+LrlU/gLmQMEUgallTBlceqEazH9bItVE8G6qZ6kZgPPimH
SC6Z9+fqvpAkp9NN+3zV1MPBaz1uNPn6aXioxlS+2+j3ZlaFByqihgaNZYSN41LE
GyaN/AYZZ6e4Ggfs7DVOssWfwIb0evfPgBhQFVF+xDttAUjRtKCI1dB+j38SRB5Y
uPPG8DT1k0TG8z9cYToQjW+A4toA28Jos3h4LU9EcVzbB/k+AU1FrnghEikCKNE=
=PTNd
-----END PGP SIGNATURE-----
More information about the nsp-security
mailing list