Security Guideance

Gadi Evron ge at
Wed Feb 24 00:20:31 UTC 2010

On 2/23/10 9:46 PM, Paul Stewart wrote:
> Hi folks...
> We have a strange series of events going on in the past while.... Brief
> history here, looking for input from the community - especially some of
> the security folks on here.

If you can't discover the malware using methods available to you, are 
you able to provide with a packet dump of the DoS? Might help us 
pinpoint the relevant botnet and/or bot.

As to web server botnets, you may be interested in this 2007 article 
from me on the subject:

Good luck,


Gadi Evron,
ge at


More information about the NANOG mailing list