[nsp-sec] black_energy ddos drones

Tarmo Randel tarmo.randel at cert.ee
Thu Oct 29 03:06:12 EDT 2009


ACK on 2586, 3249. Thank you.

> please find attached a list of ~6k drones, which were participating
> in a http flood against one of our customers (aandewatches.com,
> 74.208.182.201 & 74.208.203.4).
> 
> The C&C of this botnet is at hack-off.ru, 220.194.54.153 -- any help
> in taking it down would be much appreciated!
> 

Tarmo Randel
CERT-EE
--
+372 663 0254



More information about the nsp-security mailing list