[nsp-sec] Qwest customer Phish - drop box at AS 8075, SPAM from AS 8513

Hicks, Howard Howard.Hicks at qwest.com
Tue Mar 30 12:45:35 EDT 2010


Below is the latest qwestoffice.net phish attack with a drop box located at 207.46.30.34 ( techspport at live.com ).  Could I get an admin at live.com to kill this drop box?

AS      | IP               | AS Name
8075    | 207.46.30.34     | MICROSOFT-CORP---MSN-AS-BLOCK - Microsoft Corp

Received: from User ([217.194.147.131])
        (authenticated bits=0)
        by pop.webster.edu (8.13.3/8.13.3) with ESMTP id o2SJRYrM038661;
        Sun, 28 Mar 2010 14:27:41 -0500 (CDT)
        (envelope-from support at qwestoffice.net)
Message-Id: <201003281927.o2SJRYrM038661 at pop.webster.edu>
Reply-To: <techspport at live.com>
From: "Qwest Technical Support"<support at qwestoffice.net>
Subject: Scheduled Service Maintenance
Date: Sun, 28 Mar 2010 20:27:33 +0100
MIME-Version: 1.0

Any chance we have an admin responsible for AS 8513?  You have a compromised host at 217.194.147.131

Regards,

Howard E. Hicks
Qwest Managed Security Services
Monday - Thursday 7:30 18:00
612-664-3021

This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.




More information about the nsp-security mailing list