[nsp-sec] ACK 44038 zbot infected IPs

[Jan Boogman]

ACK for 44038

Thanks
Jan


Am 27.10.2009 um 19:09 schrieb Dirk Stander:

> ----------- nsp-security Confidential --------
>
> Hi,
>
> please find attached a list of ~5k IPs taken from a ZeuS C&C (proxy).
> The domain aplikapublicidad.es (87.106.193.251:80) has been abused to
> proxy requests to http://xxxdessert.name/glk/gt.php
> It's ok to use the IP in the reports to your clients.  The timestamps
> are in GMT.
>
>    kind regards,
>    Dirk Stander (1&1) :.
> <zbot.txt>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp- 
> security
> community. Confidentiality is essential for effective Internet  
> security counter-measures.
> _______________________________________________