Korea and US DDoS attacks: The attacking source located in United Kingdom (Windows 2003 Server)

“In order to locate the source of the attacks, we have fought
against C&C servers and have gained control of 2 in 8 of them.
After analyzing the logs of these 2 servers, we discovered the IP
address of the master server, which is 195.90.118.xxx. This IP is
located in UK. The master server is running on Windows 2003 Server
Operating System..

“During the past few days, the number of zombies has been
estimated to be 50,000 by Symantec and about 20,000 by Government
of South Korea. But, by taking control of two C&C servers and
analyzing logs on these servers, we count the exact number of
zombies that have been querying C&C servers to receive
commands. Accordingly, there have been 166,908 zombies from 74
countries around the world that have been used for the
attacks.”

Complete Story