[Emerging-Sigs] RBN addition....

Matthew Jonkman jonkman at emergingthreatspro.com
Mon Oct 25 19:19:12 EDT 2010


Will do, sending it to the right guy.

Matt

On Oct 25, 2010, at 5:00 PM, chris.kniseley at regions.com wrote:

> Already done on our end, just wanted to suggest it for the RBN list. 
> 
> 
> Thanks,
> Chris 
> 
> 
> 
> From:        Eoin Miller <eoin.miller at trojanedbinaries.com> 
> To:        emerging-sigs at emergingthreats.net 
> Date:        10/25/2010 03:56 PM 
> Subject:        Re: [Emerging-Sigs] RBN addition.... 
> Sent by:        emerging-sigs-bounces at emergingthreats.net 
> 
> 
> 
> On 10/25/2010 8:35 PM, chris.kniseley at regions.com wrote: 
> Seeing some hostile .jar files and .exe files come from this net block, 91.213.217.34 to be exact.  Looking at the robtex for 91.213.217.0/24 leads me to think that nothing good can come out of this range of ip's.  Something tells me the country of Moldova's major export is malware. 
> 
> Can we add 91.213.217.0/24 to the RBN list? 
> 
> 
> Thanks,
> Chris 
> This netblock is the one the SEO exploit kits currently reside in. If you do not already have this netblock sinkholed, you should.
> 
> -- Eoin
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
> 
> Support Emerging Threats! Get your ET Stuff! Tshirts, Coffee Mugs and Lanyards
> http://www.emergingthreats.net/index.php/support-et-and-buy-et-schwag.html 
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
> 
> Support Emerging Threats! Get your ET Stuff! Tshirts, Coffee Mugs and Lanyards
> http://www.emergingthreats.net/index.php/support-et-and-buy-et-schwag.html


----------------------------------------------------
Matthew Jonkman
Emergingthreats.net
Emerging Threats Pro
Open Information Security Foundation (OISF)
Phone 765-807-8630
Fax 312-264-0205
http://www.emergingthreatspro.com
http://www.openinfosecfoundation.org
----------------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20101025/1501bdc9/attachment.html


More information about the Emerging-sigs mailing list