[nsp-sec] DDoS mitigation help (AusCERT#20109c4d1)

[Scott A. McIntyre]

Hi Zane,


> 
> Another source of information got back to us with the C&C being hosted on:
> 
> 49314   | 91.212.198.171   | RU | NEVAL PE Nevedomskiy Alexey Alexeevich
> 
> Are you seeing traffic to that one?

I have precisely one netflow hit for the entire day to that, port 80, and nothing at all for content...so, um, maybe?

Scott A. McIntyre
XS4ALL Internet