[nsp-sec] Activity to or from 202.1.166.220 and 64.124.219.46

Rob Thomas robt at cymru.com
Tue May 12 11:28:20 EDT 2009


Hi one last time, Matthew.  :)

> Anyone got any recent info on 202.1.166.220 and 64.124.219.46 being the
> source (or even target) of any form of activity?

202.1.166.220 appears to be a Windows XP box with SP1, at least as of
2009-04-29 21:37:59 UTC.

Hmm, 202.1.166.220 might also be a proxy on TCP 3128.

64.124.219.46 is probably a Windows XP box.

Sadly, that's all we have.  :(

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");




More information about the nsp-security mailing list