[nsp-sec] Malware issue at AS45753: someone could ping me offlist

[jose nazario]

On Mar 4, 2010, at 9:36 AM, jose nazario wrote:

> i have a sample that came in from hxxp://nt11.co.in/21


FWIW this domain name used to reside in germany, on NetDirekt:

2010-02-18 20:40:39     nt11.co.in      A       112.121.181.42
2010-02-11 23:22:09     nt11.co.in      A       188.72.230.28

AS      | IP               | AS Name
28753   | 188.72.230.28    | NETDIRECT AS NETDIRECT Frankfurt, DE

_____________________________
jose nazario, ph.d. jose at arbor.net
manager of security research, arbor networks
http://asert.arbor.net/