[nsp-sec] IRCd DDoS Controller @ 68.171.207.69 TCP/6667

[White, Gerard]

Greetings.

After getting some abuse reports concerning UDP/80 DDoS attacks in the past 72 hours, I have found
an IRCd DDoS C&C located here:

AS      | IP               | AS Name
11343   | 68.171.207.69    | 383INCCMHTOWN - 383inc

If you're also getting DDoS abuse reports, you might want to check for flows to this C&C

GW 
855 - Bell Aliant

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 183 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20110123/e124b06e/attachment-0001.sig>