[nsp-sec] 2Gbps DDoS -> 360netvertising.com (209.35.180.200)

[Jared Mauch]

On Wed, Sep 03, 2008 at 02:22:33PM -0600, Danny McPherson wrote:
> ----------- nsp-security Confidential --------
>
>
> On Sep 3, 2008, at 1:59 PM, Lawrence Baldwin wrote:
>
>>
>> My colleagues over at peer1 are getting hammered with a 2Gbps tcp/80  
>> stream towards:
>>
>> Name:    360netvertising.com
>> Address:  209.35.180.200
>>
>> Any assistance in identifying the botnet C&C would be appreciated.
>
> I don't see anything in our database right now for that
> target...

	I don't see anything in the past 24 hours either.

	Btw, what is the API to query your 'database'?

	Is there a an xml dtd/ssl cert exchange mechansim such that
I can share my data into a nsp-sec accessible forum that is merged
with your data?

	Thanks,

	- Jared


-- 
Jared Mauch | I work for but do not always represent NTT America
list admin  | +1 313 506 4307 * send list policy questions to 
            | nsp-security-owner at puck.nether.net