Anatomy of 2,000 Compromised Web Servers Used in DDoS Attack
blog.sucuri.net