[nsp-sec] AOL "phisingreport" ?

[Rob Thomas]

Hi, Jason.

> AS      | IP               | AS Name
> 29802   | 66.232.107.104   | HVC-AS - HIVELOCITY VENTURES CORP

We've seen that IP talking to three botnets (with two IPs):

    loudax.datasecure.org  82.98.86.167
    l0lz.programxp.com     207.189.104.86
    ownz.ircmax.net        207.189.104.86

So at a minimum I'd say it's been owned and anything it sends is thus  
potentially suspect.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
cmn_err(do_panic, "Out of coffee!");