[nsp-sec] DDoS against 64.80.70.4 and 64.80.74.4

John Fraizer john at op-sec.us
Wed Feb 27 15:18:15 EST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


If you see flows to TCP 80 of 64.89.70.4 or 64.89.74.4, you've got Bot.

I'm actively mitigating over 1000 sources.

John
AS11456

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mandriva - http://enigmail.mozdev.org

iD8DBQFHxcWG+16lRpJszIgRAlw/AJ0df4gCKeOvQifdxD2k8Dpir6hR6QCeODzt
GOb/h8s6n8Qja+phsbPeBIc=
=uSq3
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list