[nsp-sec] ACK 3356 Re: ZeuS botnet (s288421667.onlinehome.us)

[David Rossbach]

ACK 3356

Dave Rossbach
Level3 Communications
AS3356




----- Original Message ----- 
From: "Dirk Stander" <dst+nsp-sec at glaskugel.org>
To: <nsp-security at puck.nether.net>
Sent: Tuesday, June 09, 2009 12:06 PM
Subject: [nsp-sec] ZeuS botnet (s288421667.onlinehome.us)


> ----------- nsp-security Confidential --------
>
>


--------------------------------------------------------------------------------


> Hi,
>
> please find attached a list of ~10k drones which used
> s288421667.onlinehome.us as a proxy for a ZeuS controller
> (next backend hop: http://www.sell-ads.cn/a1b8/s.php)
>
> Format is: ... | <epoch last seen> <uniq bot id (zip)> | ...
>
>    kind regards, Dirk Stander (1&1) :.
>


--------------------------------------------------------------------------------


>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security 
> counter-measures.
> _______________________________________________