[Emerging-Sigs] Whatismyip Sigs

Matt Jonkman jonkman at jonkmans.com
Thu Jan 15 10:46:46 EST 2009


Haha.

Seriously, it'd definitely be a good thing to do locally if you can
afford not to have access to the ip check sites. I wouldn't say we ought
to put them into the dnsbh as they're very useful in many cases.

Matt

David Glosser wrote:
> my typical day at the office...
> 
> 
> On Wed, Jan 14, 2009 at 10:38 PM, william metcalf
> <william.metcalf at gmail.com> wrote:
>> Fire and brimstone coming down from the skies! Rivers and seas boiling!
>> Forty years of darkness! Earthquakes, volcanoes...
>> The dead rising from the grave!
>> Human sacrifice, dogs and cats living together... mass hysteria!
>>
>>
>> On Wed, 2009-01-14 at 22:24 -0500, David Glosser wrote:
>>> <evil thought>
>>> what would happen to the malware if these ip check-on sites were
>>> pointed to  127.0.0.1 or to a false address?
>>> </evil thought>
>>>
>>> On Wed, Jan 14, 2009 at 10:21 PM, Paul Dokas <dokas at oitsec.umn.edu> wrote:
>>>> Matt Jonkman wrote:
>>>>> Forgot to ask, anyone know of other sites that are commonly used by
>>>>> malware? These are 95% of what we see in the sandnet.
>>>> We've seen malware hit ipchicken.com.
>>>>
>>>> Paul
>>>> --
>>>> Paul Dokas                                     dokas at oitsec.umn.edu
>>>> ======================================================================
>>>> Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."
>>>> _______________________________________________
>>>> Emerging-sigs mailing list
>>>> Emerging-sigs at emergingthreats.net
>>>> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>>>>
>>> _______________________________________________
>>> Emerging-sigs mailing list
>>> Emerging-sigs at emergingthreats.net
>>> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc




More information about the Emerging-sigs mailing list