[nsp-sec] DDoS against Azerbaijan gov-CERT, April 24: Softlayer, HopOne

[Bill Woodcock]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


On Apr 22, 2012, at 6:16 PM, Rob Lowe wrote:
> On 23/04/12 10:59, jose nazario wrote:
> 
>> happy to check my logs. what was the IP or hostname that was hit?
>> even an ASN would help.
> 
> If my interpretation of the logs is correct, I *think* the target was:
> 
> http://www.din.gov.az/index.php
> http://www.mot.gov.az/index.php
> 
> both of which currently resolve to 85.132.58.10.

I'm trying to get confirmation of that, but haven't heard back yet.

                                -Bill




-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
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=04uQ
-----END PGP SIGNATURE-----