File dns-zeustracker
Script types:
hostrule
Categories:
safe, discovery, external, malware
Download: http://nmap.org/svn/scripts/dns-zeustracker.nse
User Summary
Checks if the target IP range is part of a Zeus botnet by querying ZTDNS @ abuse.ch. Please review the following information before you start to scan:
Example Usage
nmap -sn -PN --script=dns-zeustracker <ip>
Script Output
Host script results: | dns-zeustracker: | Name IP SBL ASN Country Status Level Files Online Date added | foo.example.com 1.2.3.4 SBL123456 1234 CN online Bulletproof hosted 0 2011-06-17 |_ bar.example.com 1.2.3.5 SBL123456 1234 CN online Bulletproof hosted 0 2011-06-15
Requires
Author: Mikael Keri
License: Same as Nmap--See http://nmap.org/book/man-legal.html
