[nsp-sec] GBLX Phish - Takedown req

[Ramsey, Andrew]

Heather,

I've nullrouted the IP and asked our LatAm folks to secure the host.

Andrew Ramsey, CISSP
Manager, Information Security Operations
Global Crossing


-----Original Message-----
From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Schiller, Heather A
Sent: Friday, July 22, 2011 11:02 AM
To: nsp-security at puck.nether.net
Subject: [nsp-sec] GBLX Phish - Takedown req

----------- nsp-security Confidential --------


A little help taking these down please.  We contacted them, but they didn't have a clue what we were talking about.

hxxp://servicesetup.findhere.org/.verizon.net/  
hxxp://services.itservicescr.net/.verizon.net/
hxxp://services.americanelectricalservices.net/.verizon.net/
 
201.234.114.233   

Thanks,
--Heather


SWIP:
inetnum:     201.234.114.128/25
status:      reallocated
owner:       WINET S.A.C.
ownerid:     PE-WISA1-LACNIC
responsible: Martin Díaz
address:     Av. Angamos Oeste, 355, Oficina 1901
address:     LIMA18 - Lima - 
country:     PE
phone:       +51 1 7073008 []
owner-c:     IMP2
tech-c:      IMP2
abuse-c:     IMP2
created:     20070703
changed:     20100309
inetnum-up:  201.234.112/20
inetnum-up:  201.234.0/17

nic-hdl:     IMP2
person:      Impsat Peru
e-mail:      ip-per at GBLX.NET.AR
address:     Av. Manuel Olguin, 395, 67-19
address:     11001000 - Lima - 
country:     PE
phone:       +51 1 7055720 []
created:     20081020
changed:     20100818




_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
community. Confidentiality is essential for effective Internet security counter-measures.
_______________________________________________