[nsp-sec] Working from home by hosting from home?

[Jose Nazario]

> 2008/9/26 David Freedman <david.freedman at uk.clara.net>:

>> Non-authoritative answer:
>> Name:   www.nesco-online.eu
>> Address: 71.226.201.209
>> Name:   www.nesco-online.eu
>> Address: 24.34.17.210
>> Name:   www.nesco-online.eu
>> Address: 98.26.58.210

associaetd with th asprox/danmec botnet, which normally does fast flux. 
this domain name is below our threshholds for fluxing mind you (TTLs, # A 
records, etc)

-------------------------------------------------------------
jose nazario, ph.d.     <jose at arbor.net>
security researcher, office of the CTO,  arbor networks
v: (734) 821 1427 	      http://asert.arbornetworks.com/