On the other hand, we complement
this C&C-centric view with a brief analysis of
server-side victim logs related to two specific attacks: by
contacting the victims of two DDoS attacks detected by
our monitoring system, we were able to obtain webserver
access logs of actual attacks. An analysis of these traces
allowed us to study how such attacks are perceived at an
endhost, e.g., to determine the countries bots are coming
from and the impact of such attacks.