Shamil Salakhetdinov
shamil at users.mns.ru
Wed Jun 8 15:55:05 CDT 2005
Hi All, I'm trying to stop the W32.Mytob.DF at mm zip virus coming to me for several days from 67.151.53.66. I did write several times to abuse at paetec.com but it didn't work. Moreover today I've got a new kind of e-mail, which looks like a fishing attempt: <<<< >From support at smsconsulting.spb.ru Thu Jun 9 00:16:11 2005 Received: from smsconsulting.spb.ru ([67.151.53.66]) by batman.mns.ru with esmtp; Thu, 09 Jun 2005 00:16:09 +0400 id 00018DC4.42A7520A.000037BA From: support at smsconsulting.spb.ru To: shamil at smsconsulting.spb.ru Subject: Account Alert Date: Wed, 8 Jun 2005 13:12:57 -0700 <<< skipped>>> <html> <body> <BR><STRONG>Dear Valued Member, </STRONG><BR> <BR>According to our site policy you will have to confirm your account by the following link or else your account will be suspended within 24 hours for security reasons.<BR> <BR> <<<<<< here is a hidden link to 62.193.220.183, which is in France (I did insert blanks here for it to not be interpreted as legal URL: <a href="http: // 62.193.220.183 /confirm.php?email= shamil at smsconsulting.spb.ru"> http: // www.smsconsulting.spb.ru/confirm.php?email=shamil at smsconsulting.spb.ru</a><B R> <BR>Thank you for your attention to this question. We apologize for any inconvenience.<BR> <BR>Sincerely,Smsconsulting Security Department Assistant.<BR> </body> </html> >>>> Somebody there in CA, USA could you please call +1-877-340-2600 to inform them about what happening with their IP-addresses? Thank you, Shamil <<<< WHOIS results for !NET-67-151-53-64-1 Generated by www.DNSstuff.com Location: Unknown Looking up !NET-67-151-53-64-1 at whois.arin.net. NOTE: More information appears to be available at IP43-ARIN. Using 4 day old cached answer (or, you can get fresh results). Hiding E-mail address (you can get results with the E-mail address). CustName: DOCUSOURCE Address: 10450 PIONEER City: SANTA FE SPRINGS StateProv: CA PostalCode: 90670 Country: US RegDate: 2004-10-21 Updated: 2004-10-21 NetRange: 67.151.53.64 - 67.151.53.127 CIDR: 67.151.53.64/26 NetName: PAET-AN-DOCUS-1 NetHandle: NET-67-151-53-64-1 Parent: NET-67-151-0-0-1 NetType: Reassigned Comment: RegDate: 2004-10-21 Updated: 2004-10-21 AbuseHandle: ABUSE741-ARIN AbuseName: Abuse AbusePhone: +1-877-340-2600 AbuseEmail: *****@paetec.com TechHandle: IP43-ARIN TechName: IP Administrator TechPhone: +1-877-340-2555 TechEmail: *******@paetec.com OrgTechHandle: IP43-ARIN OrgTechName: IP Administrator OrgTechPhone: +1-877-340-2555 OrgTechEmail: *******@paetec.com # ARIN WHOIS database, last updated 2005-06-03 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database.>>>> -- Web: http://smsconsulting.spb.ru/shamil_s