[nsp-sec] [SPAM] rundll841.com wwwDOTwin496.com wwwDOTtag58.com err68.com and sysid72.com sqlinjection sites.

[John Kristoff]

On Wed, 04 Jun 2008 14:23:43 -0700
Stephen Gill <gillsr at cymru.com> wrote:

> We may have a fastflux feed available soon, so if there are any folks that
> would like to contribute to it for the ASN Alerts, please let us know!

Fair warning, while fast flux is largely and almost exclusively used
by the miscreants, don't expect it to stay that way.  It is potentially
a useful technique for legitimate DNS-based operations.

John