File dns-zeustracker

脚本使用类型: hostrule
脚本所属分类: safe, discovery, external, malware
脚本下载地址: http://nmap.org/svn/scripts/dns-zeustracker.nse

User Summary

Checks if the target IP range is part of a Zeus botnet by querying ZTDNS @ abuse.ch. Please review the following information before you start to scan:

• https://zeustracker.abuse.ch/ztdns.php

Example Usage

执行格式

nmap -sn -PN --script=dns-zeustracker <ip>

Script Output

Host script results:
| dns-zeustracker: 
|   Name                IP        SBL         ASN    Country  Status   Level               Files Online  Date added
|   foo.example.com     1.2.3.4   SBL123456   1234   CN       online   Bulletproof hosted  0             2011-06-17
|_  bar.example.com     1.2.3.5   SBL123456   1234   CN       online   Bulletproof hosted  0             2011-06-15

Requires

• dns
• ipOps
• stdnse
• tab
• table

Author: Mikael Keri

License: VER007 整理 http://www.ver007.com