[nsp-sec] ACK 174 RE: zeus IPs

[Shelton, Steve]

Thanks, ACK for 174.

Steve Shelton
Sec Engineer
Cogent Communications



-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Smith, Donald
Sent: Wednesday, March 23, 2011 5:47 PM
To: 'nsp-security at puck.nether.net'
Subject: [nsp-sec] zeus IPs

----------- nsp-security Confidential --------

>From a trusted third parties sinkholes over the last few days.
I was given permission to share this with nsp-sec specifically.
I removed the as209 IPs and have already forwarded those to our abuse
team.


Timestamp is GMT 0 and 'first seen' instance.


174     | 204.171.50.30    | 2011-03-21 11:29:09 | COGENT Cogent/PSI
174     | 38.127.197.103   | 2011-03-22 19:56:38 | COGENT Cogent/PSI
174     | 69.41.92.40      | 2011-03-20 01:35:00 | COGENT Cogent/PSI

Sharing: Author's permission required.
Donald.Smith at qwest.com



This communication is the property of Qwest and may contain confidential
or
privileged information. Unauthorized use of this communication is
strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and
destroy
all copies of the communication and any attachments.



_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________