Comments on: Nirbot Neutered? http://ddos.arbornetworks.com/2007/04/nirbot-neutered/ A weblog dedicated to educating the community on security threats that matter Sun, 29 Jan 2012 02:23:23 +0000 hourly 1 http://wordpress.org/?v= By: .:[ d4 n3wS ]:. » Blog Archive » Nirbot, bande passante et statistiques http://ddos.arbornetworks.com/2007/04/nirbot-neutered/comment-page-1/#comment-262259 .:[ d4 n3wS ]:. » Blog Archive » Nirbot, bande passante et statistiques Wed, 25 Aug 2010 04:11:01 +0000 http://asert.arbornetworks.com/2007/04/nirbot-neutered/#comment-262259 [...] Origine de l’article : http://asert.arbornetworks.com/2007/04/nirbot-neutered/ [...] [...] Origine de l’article : http://asert.arbornetworks.com/2007/04/nirbot-neutered/ [...]

]]> By: Liquidmatrix Security Digest » Your April 26th Morning Coffee http://ddos.arbornetworks.com/2007/04/nirbot-neutered/comment-page-1/#comment-15976 Liquidmatrix Security Digest » Your April 26th Morning Coffee Thu, 26 Apr 2007 13:35:16 +0000 http://asert.arbornetworks.com/2007/04/nirbot-neutered/#comment-15976 [...] Nirbot Neutered? [...] [...] Nirbot Neutered? [...]

]]> By: www.andrewhay.ca » Suggested Blog Reading - Friday April 20th, 2007 http://ddos.arbornetworks.com/2007/04/nirbot-neutered/comment-page-1/#comment-15214 www.andrewhay.ca » Suggested Blog Reading - Friday April 20th, 2007 Mon, 23 Apr 2007 16:24:00 +0000 http://asert.arbornetworks.com/2007/04/nirbot-neutered/#comment-15214 [...] Nirbot Neutered? Nirbot’s been a huge source of another set of attacks we’ve been tracking in the past few months, as well, the Symantec AV realtime VirusScan attack on TCP ports 2967 and 2968. Given that Nirbot’s involved in that, we would expect to see a similar drop in attack activity at about the same time and, sure enough, we do. [...] [...] Nirbot Neutered? Nirbot’s been a huge source of another set of attacks we’ve been tracking in the past few months, as well, the Symantec AV realtime VirusScan attack on TCP ports 2967 and 2968. Given that Nirbot’s involved in that, we would expect to see a similar drop in attack activity at about the same time and, sure enough, we do. [...]

]]> By: BelchSpeak http://ddos.arbornetworks.com/2007/04/nirbot-neutered/comment-page-1/#comment-15206 BelchSpeak Mon, 23 Apr 2007 15:12:19 +0000 http://asert.arbornetworks.com/2007/04/nirbot-neutered/#comment-15206 I'm not familiar with how this bot worked. How was it neutered? Typically bots die when the the command host is cut off or if the malware hosting site is disabled. Seems unusual that activity would just... stop. Love your analysis! Keep posting stuff like this. I’m not familiar with how this bot worked. How was it neutered? Typically bots die when the the command host is cut off or if the malware hosting site is disabled. Seems unusual that activity would just… stop.

Love your analysis! Keep posting stuff like this.

]]>