Fergie's Tech Blog

Shadowserver: Georgian Government Websites Under Attack

Via The Shadowserver Foundation.

With the recent events in Georgia, we are now seeing new attacks against .ge sites. www.parliament.ge & president.gov.ge are currently being hit with http floods. In this case, the C&C server involved is at IP address 79.135.167.22 which is located in Turkey.

More here.

Note: For what it's worth, it is well-known in security circles that TTNet (Turk Telekom) has had some very serious problems with Russian/Ukrainian cyber criminals operating from within their network(s) for a couple of years now:

AS      | IP               | AS Name
9121    | 79.135.167.22    | TTNET TTnet Autonomous System

Also, Brian Krebs points out that Jart Armin has also been blogging about this over on RBNExploit. -ferg

posted by Fergie @ 8/10/2008 12:28:00 PM