[nsp-sec] IRCd DDoS Controller @ 68.171.207.69 TCP/6667

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 1/23/2011 7:14 AM, White, Gerard wrote:
> Greetings.
> 
> After getting some abuse reports concerning UDP/80 DDoS attacks in the past 72 hours, I have found
> an IRCd DDoS C&C located here:
> 
> AS      | IP               | AS Name
> 11343   | 68.171.207.69    | 383INCCMHTOWN - 383inc
> 
> If you're also getting DDoS abuse reports, you might want to check for flows to this C&C

Magic special sauce applied, thanks Gerard!

Regards,
Tim

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk08logACgkQluRbRini9tjNfQCePHrkKZH8TpXMDjQZ7aG18VQp
6GYAn18Rx0WcbiA2+wJ+GrGxJ6hQdvGX
=Wa/W
-----END PGP SIGNATURE-----