[nsp-sec] AS12491 (was Ping: Google/GMail)

[Rob Thomas]

Hi, team.

> 81.199.89.139 and 81.199.84.132.

Yep, 81.199.89.139 has emitted Storm traffic at least since  
2008-02-27 16:11:21 UTC.  However, it may not be a Storm node  
directly.  It's a Mikrotik HttpProxy with a lot of Windows NT and 98  
hosts (yes, you read that correctly) using it.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);