Security Guideance

Gadi Evron ge at
Tue Feb 23 18:20:31 CST 2010

On 2/23/10 9:46 PM, Paul Stewart wrote:
> Hi folks...
> We have a strange series of events going on in the past while.... Brief
> history here, looking for input from the community - especially some of
> the security folks on here.

If you can't discover the malware using methods available to you, are 
you able to provide with a packet dump of the DoS? Might help us 
pinpoint the relevant botnet and/or bot.

As to web server botnets, you may be interested in this 2007 article 
from me on the subject:

Good luck,


Gadi Evron,
ge at


More information about the NANOG mailing list