[nsp-sec] rundll841.com wwwDOTwin496.com wwwDOTtag58.com err68.comandsysid72.com sqlinjection sites.

[William Salusky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Smith, Donald wrote:
|> I am seeing 66.232.102.169, 216.150.79.226, 203.117.170.42, and
|> 66.199.241.98 communication on 4449 to the end nodes.
|> Do you see any reason not to take action against those IP addresses?

I can think of no reason to avoid protecting your own transit
networks... do so if your policy allows!  Others can and will chime in
if they desire.


- --

William Salusky
william.salusky at aol.net
Sr. Technical Security Investigator - AOL Operations Security
703-265-4924 (desk)
703-201-8873 (cell)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)

iD8DBQFISDnpXyx2ON3+G40RAqQFAKCRR0XJ8DDdDDrhnkJDUGTcLcMBigCff8l1
07LcJGWOd7BHcRcxOJ07gN4=
=tZqK
-----END PGP SIGNATURE-----