[nsp-sec] ACK AS852 - RE: zbot 74.208.200.182

Thu Mar 25 11:30:40 EDT 2010

ACK for AS852, thanks Dirk.

Chris

-----Original Message-----
From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Dirk Stander
Sent: March-25-10 6:19 AM
To: NSP-Sec
Subject: [nsp-sec] zbot 74.208.200.182
Importance: High

----------- nsp-security Confidential --------

Hi Teams,

please find attached a list of ZeuS botnet drones which were connected to
the c&c 74.208.200.182 (bestschoolloanconsolidation.com).  The timestamps
are GMT+00 and the bot id contains the windows host name.