[nsp-sec] ThePlanet DDoS info - paging AS5769

[Jose Nazario]

saw on twitter tha ThePlanet suffered a ddos:

 	http://twitter.com/jeffpollard/statuses/1467964102

this may be your C&C:

       timestamp      |                     cc_host                      | 
cc_port |    target_ip    |           target_host
---------------------+--------------------------------------------------+---------+-----------------+---------------------------------
  2009-04-02 12:54:29 | modemcable202.134-203-24.mc.videotron.ca         | 
7777    | 67.18.176.45    |
  2009-04-02 12:54:25 | modemcable202.134-203-24.mc.videotron.ca         | 
7777    | 67.18.176.45    |
  2009-04-02 12:54:20 | modemcable202.134-203-24.mc.videotron.ca         | 
7777    | 67.18.176.45    |


modemcable202.134-203-24.mc.videotron.ca has address 24.203.134.202

AS      | IP               | AS Name
5769    | 24.203.134.202   | VIDEOTRON - Videotron Telecom Ltee

-- 
-------------------------------------------------------------
jose nazario, ph.d.     	<jose at arbor.net>
manager of security research 	arbor networks
v: (734) 821 1427 	      	http://asert.arbor.net/