[nsp-sec] DDoS against Azerbaijan gov-CERT, April 24: Softlayer, HopOne

[Rob Lowe]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Jose,

On 23/04/12 10:59, jose nazario wrote:

> happy to check my logs. what was the IP or hostname that was hit?
> even an ASN would help.

If my interpretation of the logs is correct, I *think* the target was:

http://www.din.gov.az/index.php
http://www.mot.gov.az/index.php

both of which currently resolve to 85.132.58.10.

Cheers,
Rob
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=y0ch
-----END PGP SIGNATURE-----