[nsp-sec] ThePlanet DDoS info - paging AS5769

[Nicholas Ianelli]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Oh hello no. We know local LE that can most likely assist.

What do you guys think?

Nick

Jose Nazario wrote:
> ----------- nsp-security Confidential --------
> 
> saw on twitter tha ThePlanet suffered a ddos:
> 
>     http://twitter.com/jeffpollard/statuses/1467964102
> 
> this may be your C&C:
> 
>       timestamp      |                     cc_host                     
> | cc_port |    target_ip    |           target_host
> ---------------------+--------------------------------------------------+---------+-----------------+---------------------------------
> 
>  2009-04-02 12:54:29 | modemcable202.134-203-24.mc.videotron.ca        
> | 7777    | 67.18.176.45    |
>  2009-04-02 12:54:25 | modemcable202.134-203-24.mc.videotron.ca        
> | 7777    | 67.18.176.45    |
>  2009-04-02 12:54:20 | modemcable202.134-203-24.mc.videotron.ca        
> | 7777    | 67.18.176.45    |
> 
> 
> modemcable202.134-203-24.mc.videotron.ca has address 24.203.134.202
> 
> AS      | IP               | AS Name
> 5769    | 24.203.134.202   | VIDEOTRON - Videotron Telecom Ltee
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAknbgVwACgkQi10dJIBjZICXfgCeNtmRlC7jen36gnFR0TbnpCkj
bu0AoM/WTwWukykBWB3B07YjAoEjXlFL
=XJem
-----END PGP SIGNATURE-----