[nsp-sec] IPs contacting Zeus c&c resend with the log

[Smith, Donald]

Tim was nice enough to post it here.

https://www.cymru.com/nsp-sec/Owned/basedmarket.log



When packets collide the controllers cease transmission AND wait a random time before retransmission (mostly)!
Donald.Smith at CenturyLink.com


> -----Original Message-----
> From: Tim Wilde [mailto:twilde at cymru.com]
> Sent: Wednesday, October 19, 2011 2:11 PM
> To: Smith, Donald
> Cc: 'nsp-security at puck.nether.net'
> Subject: Re: [nsp-sec] IPs contacting Zeus c&c resend with the log
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 10/19/2011 1:57 PM, Smith, Donald wrote:
> > Resending as a zip in case the log file is too big of an
> > attachment.
>
> Still no joy, can we facilitate putting it up somewhere for you?
>
> Tim
>
> - --
> Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
> twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
> -----BEGIN PGP SIGNATURE-----
>
> iEYEARECAAYFAk6fLtgACgkQluRbRini9tgbBQCeO4H2G7aq3XhwvQp9LbcphCnw
> urIAniit6od0S7AjYolnrMoPdyLEP5J9
> =QOz8
> -----END PGP SIGNATURE-----

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.