[nsp-sec] ACK AS852 - RE: ZeuS/Zbot logs.

[Chris Calvert]

ACK for AS852

Thanks Scott,

Chris

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-
> bounces at puck.nether.net] On Behalf Of Scott A. McIntyre
> Sent: Tuesday, November 03, 2009 5:48 AM
> To: NSP nsp-security
> Subject: [nsp-sec] ZeuS/Zbot logs.
> 
> ----------- nsp-security Confidential --------
> 
> Hi all,
> 
> With the help of one of my customers I gained access to an Apache
> server log of a box which was being used as a ZeuS-redirector.
> Looking at the content, about 22K IPs visited in the last day or so
> from a pretty healthy list of ASNs, which is below.