Sep 7, 2006

microsoft.com spoofed?

Blacklist Domain Ban: microsoft.com Entire range spoofed by hackers
Agent: mozilla/4.0 (compatible; msie 6.0; windows nt 5.2; wow64; sv1)
131.107.0.96 tide526.microsoft.com

Word is that someone is using microsoft ips.

One would think MS would be using msie 7 if it was real.

Update I started seeing what looked like valid users so this domain was removed from the ban list but is being watched.

2 comments:

Maria said...

hmm interesting..i keep having this "visitor" from tide526.microsoft.com at my website www.crea7ive.com.
So you say it might be some punk?

Maria

Anonymous said...

I am seeing this as well. Once a month so far and searching for keywords such as hydrocodone and airlines which my site has nothing to do with.