[nsp-sec] Intel on an .cn IP

[Dave Mitchell]

Also on that note, anyone with passive dns intel on the following
domains would be great!

ccj1.cn 
bbg2.cn  
1235321.com or www.1235321.com

Thanks!

-dave


On Mon, Aug 10, 2009 at 06:48:32PM -0700, Dave Mitchell wrote:
> ----------- nsp-security Confidential --------
> 

> CN-CERT/all,
>   If anyone has any "interesting" flow data about 159.226.7.162/32, I'd
> be very interested. It's just an IP we're investigating and trying to
> find out exactly what it's been doing.
> 
> Thanks in advance!
> 
> -dave



> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090810/49b9f3e8/attachment-0001.sig>