[nsp-sec] Qwest customer Phish - drop box at AS 8075, SPAM from AS 8513
Hicks, Howard
Howard.Hicks at qwest.com
Tue Mar 30 12:45:35 EDT 2010
Below is the latest qwestoffice.net phish attack with a drop box located at 207.46.30.34 ( techspport at live.com ). Could I get an admin at live.com to kill this drop box?
AS | IP | AS Name
8075 | 207.46.30.34 | MICROSOFT-CORP---MSN-AS-BLOCK - Microsoft Corp
Received: from User ([217.194.147.131])
(authenticated bits=0)
by pop.webster.edu (8.13.3/8.13.3) with ESMTP id o2SJRYrM038661;
Sun, 28 Mar 2010 14:27:41 -0500 (CDT)
(envelope-from support at qwestoffice.net)
Message-Id: <201003281927.o2SJRYrM038661 at pop.webster.edu>
Reply-To: <techspport at live.com>
From: "Qwest Technical Support"<support at qwestoffice.net>
Subject: Scheduled Service Maintenance
Date: Sun, 28 Mar 2010 20:27:33 +0100
MIME-Version: 1.0
Any chance we have an admin responsible for AS 8513? You have a compromised host at 217.194.147.131
Regards,
Howard E. Hicks
Qwest Managed Security Services
Monday - Thursday 7:30 18:00
612-664-3021
This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful. If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.
More information about the nsp-security
mailing list