full-disclosure - Sobig has a surprise...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200308232002.05826.jstewart@lurhq.com>
From: jstewart at lurhq.com (Joe Stewart)
Subject: Sobig has a surprise...

On Sat, 23 Aug 2003 18:53:13 -0500, Jerry Heidtke wrote:
> I've been unable to find, anywhere, the list of servers that Sobig.e 
> tries to contact.

Here is the list of "master" servers from Sobig.e:

129.244.36.194
203.252.75.45
209.34.8.147
217.228.235.145
217.230.224.66
218.146.139.246
218.158.43.206
24.96.26.108
61.41.223.43
62.47.6.238
64.229.253.52
65.69.221.166
65.95.29.173
65.95.91.31
66.169.84.77
67.164.250.26
67.168.13.135
67.73.60.121
67.74.161.243
69.22.34.186
80.136.150.140
80.145.119.84

-Joe