thanks rob. NACK for that IP. last attacks we detected into KZ were on 3-28-2012. On Apr 22, 2012, at 9:16 PM, Rob Lowe wrote: > 85.132.58.10 _____________________________ jose nazario, ph.d. jose at arbor.net sr. manager of security research, arbor networks blog: http://asert.arbor.net/ twitter: @arbornetworks