It is still active.
APNIC data for the IP:
inetnum: 202.149.192.0 - 202.149.223.255 netname: HTIL-TTML-IN descr: Tata Teleservices Maharashtra Ltd country: IN admin-c: IO9-AP tech-c: IO9-AP mnt-by: APNIC-HM mnt-lower: MAINT-IN-HTIL mnt-routes: MAINT-IN-HTIL changed: [EMAIL PROTECTED] 20030306 status: ALLOCATED PORTABLE source: APNIC
person: ISP Operation nic-hdl: IO9-AP e-mail: [EMAIL PROTECTED] address: Ispat House, address: B.G.Kher Marg, address: Worli. address: Mumbai 400018 phone: +91-2-2791-0367 fax-no: +91-2-2790-3175 country: IN changed: [EMAIL PROTECTED] 20021007 mnt-by: MAINT-NEW source: APNIC
----- Original Message ----- From: "Pete McNeil" <[EMAIL PROTECTED]>
To: "Kami Razvan" <[EMAIL PROTECTED]>
Sent: Thursday, September 30, 2004 9:59 AM
Subject: Re: [Declude.JunkMail] eBay Phishing- Live
On Thursday, September 30, 2004, 9:25:20 AM, Kami wrote:
KR> Hi;
KR>
KR> http://202.149.196.236/.aw-cgicgisk/SignIn.php
KR>
KR> You may want to filter the above. Just got a phishing email.. it is active.
KR>
KR> Regards,
KR> Kami
Interesting. We generated an active rule for this back on 20040728. It appears that the hosting facility in question is compromized.
_M
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
