[nsp-sec] DDoS against 64.80.70.4 and 64.80.74.4
John Fraizer
john at op-sec.us
Wed Feb 27 15:18:15 EST 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
If you see flows to TCP 80 of 64.89.70.4 or 64.89.74.4, you've got Bot.
I'm actively mitigating over 1000 sources.
John
AS11456
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mandriva - http://enigmail.mozdev.org
iD8DBQFHxcWG+16lRpJszIgRAlw/AJ0df4gCKeOvQifdxD2k8Dpir6hR6QCeODzt
GOb/h8s6n8Qja+phsbPeBIc=
=uSq3
-----END PGP SIGNATURE-----
More information about the nsp-security
mailing list