[nsp-sec] DDoS RS addition request - 91.205.17.4 port 8788/TCP botnet C2

[Nicholas Ianelli]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

So I found the C2 behind all the DDoS attacks against 80.239.232.154 and
80.239.232.152:

91.205.17.4 port 8788/TCP

channels:

#vdm2
#spd
#rtg
#gg


If folks have traffic to the above IP, please squash it.

Thanks!
Nick

- -- 
Nicholas Ianelli: Neustar, Inc.
Security Operations

46000 Center Oak Plaza Sterling, VA 20166
+1 571.434.4691 - http://www.neustar.biz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkwSntYACgkQi10dJIBjZIC3pwCfVfS3JWQelMYOXhphDRW5GNWh
AcoAoPLWIcLLbvbyf0ugRw2qndBYgmeg
=j9dF
-----END PGP SIGNATURE-----