Another load of attempts to get e-mail a ... / 2011-08-01

Another load of attempts to get e-mail accounts at work with a phishing scam. And while diagnosing headers to notify sites with accounts with stolen credentials I noticed a pattern I've seen before: authenticated smtp sessions from charter.com IPs.

from 24-183-196-50.dhcp.jcsn.tn.charter.com [24.183.196.50]
from 97-81-17-250.static.gwnt.ga.charter.com ([97.81.17.250])