[nsp-sec] ACK: Possible 700k+ node botnet
Huopio Kauto
Kauto.Huopio at ficora.fi
Thu Oct 2 05:49:21 EDT 2008
ACK on 719-1741-5515-21856-28723-39699-39784. Sanitized info
being forwarded to relevant abuse teams.
My processing run on the file indicated a lot of dupes. Is each
individual
entry correlating a single hit at your site or are multiple entries
result of multiple URLs being tried from same source IP?
Also..some unusual sources here. Interesting.
Regards
Kauto Huopio
CERT-FI
Kauto Huopio - kauto.huopio at ficora.fi
Senior information security adviser
Finnish Communications Regulatory Authority / CERT-FI
tel. +358-9-6966772, fax +358-9-6966515, mobile +358-50-5826131
CERT-FI watch desk daytime: +358-9-6966510 / http://www.cert.fi
More information about the nsp-security
mailing list