[nsp-sec] ACK: Possible 700k+ node botnet

Huopio Kauto Kauto.Huopio at ficora.fi
Thu Oct 2 05:49:21 EDT 2008


ACK on 719-1741-5515-21856-28723-39699-39784. Sanitized info
being forwarded to relevant abuse teams. 

My processing run on the file indicated a lot of dupes. Is each
individual
entry correlating a single hit at your site or are multiple entries 
result of multiple URLs being tried from same source IP?

Also..some unusual sources here. Interesting. 

Regards

Kauto Huopio
CERT-FI

Kauto Huopio - kauto.huopio at ficora.fi
Senior information security adviser
Finnish Communications Regulatory Authority  / CERT-FI
tel. +358-9-6966772, fax +358-9-6966515, mobile +358-50-5826131
CERT-FI watch desk daytime: +358-9-6966510 / http://www.cert.fi



More information about the nsp-security mailing list