[nsp-sec] One baddie kicked out: zlkon.lv / AS12553 PCEXPRESS-AS _DATORU EXPRESS SERVISS_ Ltd

Tue Apr 28 09:40:23 EDT 2009

This AS was removed from Internet routing this morning CET. 

If you see now 94.247.0.0/22 somewhere, instant bad traffic flag.

Why this was bad? Take a glimpse:

http://www.malwaredomainlist.com/mdl.php?search=94.247&colsearch=All&qua
ntity=500

--Kauto

Kauto Huopio - kauto.huopio at ficora.fi
Senior information security adviser
Finnish Communications Regulatory Authority  / CERT-FI
tel. +358-9-6966772, fax +358-9-6966515, mobile +358-50-5826131
CERT-FI watch desk daytime: +358-9-6966510 / http://www.cert.fi 