[nsp-sec] ping AS5009 (peer AS209, AS3356) <-- phish site takedown

Hillar Aarelaid hillar.aarelaid at cert.ee
Wed Mar 25 03:39:06 EDT 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Morning

phishing site at hxxp://ip-209-124-192-94.static.eatel.net/HansaBank- 
SwedBank//index.php


Bulk mode; whois.cymru.com [2009-03-25 07:26:42 +0000]
5009    | 209.124.192.94   | 209.124.192.0/19    | US | arin     |  
1999-04-19 | ADVTEL - Advanced Tel, Inc.
Bulk mode; peer-whois.cymru.com [2009-03-25 07:26:42 +0000]
209     | 209.124.192.94   | 209.124.192.0/19    | US | arin     |  
1999-04-19 | ASN-QWEST - Qwest Communications Corporation
3356    | 209.124.192.94   | 209.124.192.0/19    | US | arin     |  
1999-04-19 | LEVEL3 Level 3 Communications

Hillar Aarelaid
CERT-EE

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)

iD8DBQFJyd+aKRfAQOe42cYRAnytAJ4j8znAt7P58X7Ucvzw76Idtlc7wgCcCv6H
GZUiPm9zbcEN17fHjIE/Ndo=
=Qweh
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list