[nsp-sec] AS27699 (AS10429) Br IP hosting phishing site impacting PL

[Guilherme Venere]

Hello Neil,

Sorry for taking so long to reply, but we had a big holiday here this 
weekend and i was out of town. I'm contacting Telefonica CSIRT right now, 
they are responsible for both IPs.

Should be gone soon...

Cheers,

Guilherme
CAIS/RNP

On Fri, 2 May 2008, Neil Long wrote:

> ----------- nsp-security Confidential --------
>
> Hello
>
> Anyone able to help here? BR host is hosting at least one phish site
> impacting folk in Poland
>
> AS      | IP               | AS Name
> 27699   | 200.171.6.189    | TELECOMUNICACOES DE SAO PAULO S/A - TELESP
>
> Peer/Upstream
> 10429   | 200.171.6.189    | Telefonica Empresas SA
>
> Bank Zachodni BZWBK
>
> Official banks webpage is www.bzwbk.pl and www.centrum24.pl
>
> Phish at
>
> h t t p :// 200.171.6.189/icons/www.centrum24.pl/bzwbkonline/
> eSmart.html?sessid=00007B1ytZWt3hKrM8ihVA_ERuL+11cvhf90h
>
> Usual methods haven't been able to get assistance (language barriers
> here) so perhaps NSP-SEC can assist from a different perspective.
>
> Thanks
> Neil
>
>
> --
> Neil Long, Team Cymru
> http://www.cymru.com | +1 312 924 4022 | neil at cymru.com
>
>
>
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
> ------------ Output from gpg ------------
> gpg: Signature made Fri 02 May 2008 05:17:31 AM BRT using RSA key ID 6A46D9E4
> gpg: Good signature from "Neil Long <neil.long at cymru.com>"
>
>