[nsp-sec] ACK black_energy ddos drones

Taka Mizuguchi taka at nttv6.jp
Thu Oct 29 19:53:16 EDT 2009


ACK for japanese ISPs.

2510,2516,2518,2519,2527,2907,2914,4713,4732,7514,7522,9354,9617,9824,10013,17511,17676,17698,23777,37903,37922,38628.


Dirk Stander wrote,on 09.10.29 1:29 AM:
> ----------- nsp-security Confidential --------
> 
> 
> 
> ------------------------------------------------------------------------
> 
> Hi,
> 
> please find attached a list of ~6k drones, which were participating
> in a http flood against one of our customers (aandewatches.com,
> 74.208.182.201 & 74.208.203.4).
> 
> The C&C of this botnet is at hack-off.ru, 220.194.54.153 -- any help
> in taking it down would be much appreciated!
> 
>     kind regards, Dirk Stander (1&1) :.
> 
> 
> ------------------------------------------------------------------------



-- 
Taka Mizuguchi



More information about the nsp-security mailing list