Jump to content

The next to devnull is: wangxl[at]sinnet.com.cn, abuse[at]sinnet.com.cn, lichao[at]sinnet.com.cn 124.42.123.64/26

ka112

By ka112
in SpamCop Reporting Help

Recommended Posts

ka112 Member

ka112

Posted
Posted

124.42.123.64/26 is listed on the Register Of Known spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by HerbalKing.

lingsefeidian technology co. ltd.

Sinnet, why do spammers keep coming back here? Is someone selling them special services to allow them to keep coming back? Is this still Lingsefeidian Technology Co. Ltd. that was hosting spammers since last autumn?

124.42.123.121 is not the only address in this block controlled by spammers. Please remove *all* the spammers from your network and keep them off, permanently.

[whois.apnic.net node-2]

inetnum: 124.42.96.0 - 124.42.127.255

netname: HUARUI

descr: Langfang Development Area Huarui Xintong Network Technology Co., Ltd.

descr: Langfang university Langfang Development Area

country: CN

admin-c: WH271-AP

tech-c: WH271-AP

mnt-by: MAINT-CNNIC-AP

mnt-lower: MAINT-CNNIC-AP

mnt-routes: MAINT-CNCGROUP-RR

status: ALLOCATED PORTABLE

changed: hm-changed[at]apnic.net 20080226

source: APNIC

person: Wang Huijun

nic-hdl: WH271-AP

e-mail: chenbincb[at]sinnet.com.cn

address: Langfang university Langfang Development Area

phone: +86-13311166160

fax-no: +86-64181819

country: CN

changed: ipas[at]cnnic.cn 20080227

mnt-by: MAINT-CNNIC-AP

source: APNIC

inetnum: 124.42.96.0 - 124.42.127.255

netname: HUARUI

descr: Langfang Development Area Huarui Xintong Network Technology Co., Ltd.

descr: Langfang university Langfang Development Area

country: CN

admin-c: WH271-CN

tech-c: WH271-CN

mnt-lower: MAINT-CN-SINNETHT

status: ALLOCATED PORTABLE

mnt-by: MAINT-CNNIC-AP

changed: ipas[at]cnnic.cn 20080220

source: CNNIC

person: Wang Huijun

nic-hdl: WH271-CN

e-mail: chenbincb[at]sinnet.com.cn

address: Langfang university Langfang Development Area

phone: +86-13311166160

fax-no: +86-64181819

country: CN

changed: ipas[at]cnnic.cn 20080227

mnt-by: MAINT-CNNIC-AP

source: CNNIC

124.42.123.100/32

Removed sinnet.com.cn SR02

2008-02-25 10:05:51

SBL63445 your1000credit.com etc.

124.42.123.119/32

Removed sinnet.com.cn SR02

2008-02-15 03:19:55

SBL62960 Leo Kuvayev / BadCow

bulletproof hosting

124.42.123.96/29

Removed sinnet.com.cn SR02

2007-11-26 01:06:06

SBL60997 HerbalKing

bulletproof hosting (suwolsim.com etc.)

124.42.123.64/26

Pending sinnet.com.cn SR04

2007-11-19 03:00:53

SBL60799 Lingsefeidian technology co. ltd. - spammer hosts

124.42.123.111/32

Removed sinnet.com.cn SR04

2007-11-05 00:40:28

SBL60130 Spammer DNS & website hosting

124.42.123.0/24

Removed sinnet.com.cn SR02

2007-11-02 08:59:56

SBL60073 HerbalKing

HerbalKing [at] 124.42.123.109

124.42.123.103/32

Removed sinnet.com.cn SR02

2007-10-31 07:16:40

SBL60033 HerbalKing

replica watch fraud

124.42.123.75/32

Removed sinnet.com.cn SR02

2007-10-30 04:05:22

SBL59931 HerbalKing

TOLMEN STAR ENTERPRISES LTD

124.42.123.102/32

Removed sinnet.com.cn SR02

2007-10-30 03:43:35

SBL59610 HerbalKing

EliteHerbal - flemaco.com | pkkclan.com | ns_.roko1dns.com

124.42.123.0/25

Removed sinnet.com.cn SR22

2007-10-30 22:22:56

SBL59114 Dirty block

124.42.123.78/32

Removed sinnet.com.cn SR22

2007-10-30 06:29:03

SBL59113 HerbalKing

Spammer DNS - ns4.metdns101.com (Herbalking)

124.42.123.69/32

Removed sinnet.com.cn SR02

2007-10-30 03:34:44

SBL58752 HerbalKing

www.corteon.com (HerbalKing)

foleire.com A 124.42.123.121

ns1.ns-earthling.com A 124.42.123.121

ns2.ns-earthling.com A 124.42.123.121

ginuka.com NS ns1.ns-earthling.com

9tg9za.com NS ns1.ns-earthling.com

teneriiife.com NS ns1.ns-earthling.com

jurife.com NS ns1.ns-earthling.com

nsogeoge.com NS ns1.ns-earthling.com

foleire.com NS ns1.ns-earthling.com

vgasuvise.com NS ns1.ns-earthling.com

vgieggeg.com NS ns1.ns-earthling.com

nbosoeogeg.com NS ns1.ns-earthling.com

ns1.ns-earthling.com A 124.42.76.18

ns1.ns-earthling.com A 124.42.76.19

ns1.ns-earthling.com A 124.42.123.121

riddli.com NS ns1.ns-earthling.com

87flhfnsl.com NS ns1.ns-earthling.com

pooelsheen.com NS ns1.ns-earthling.com

ureshapen.com NS ns1.ns-earthling.com

weverter.com NS ns1.ns-earthling.com

ravestomoes.com NS ns1.ns-earthling.com

suvetares.com NS ns1.ns-earthling.com

dumonaeses.com NS ns1.ns-earthling.com

neverenoughsizes.com NS ns1.ns-earthling.com

qeguegis.com NS ns1.ns-earthling.com

lopkoess.com NS ns1.ns-earthling.com

wolploess.com NS ns1.ns-earthling.com

sooolss.com NS ns1.ns-earthling.com

frontbrots.com NS ns1.ns-earthling.com

numurests.com NS ns1.ns-earthling.com

begtous.com NS ns1.ns-earthling.com

holapoeit.com NS ns1.ns-earthling.com

floucst.com NS ns1.ns-earthling.com

craonnu.com NS ns1.ns-earthling.com

troply.com NS ns1.ns-earthling.com

--- reading URL http://immogi.com/

--- contacting host immogi.com [124.42.123.121] on port 80

HTTP/1.1 200 OK

Date: Wed, 27 Feb 2008 08:19:23 GMT

Server: Apache/2.0.58 (Unix) mod_ssl/2.0.58 OpenSSL/0.9.7f PHP/4.4.7

Connection: close

Set-Cookie: AFF=3088119236; expires=Wed, 05-Mar-2008 08:19:23 GMT

Set-Cookie: DOM=immogi.com; expires=Wed, 05-Mar-2008 08:19:23 GMT

Set-Cookie: OPT=O; expires=Wed, 05-Mar-2008 08:19:23 GMT

Set-Cookie: PAGE=1426447528; path=/

Content-type: text/html

Content-Length: 21159

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

<title>VPXL - Penis Enlargement Made Easy</title>

Notes for sinnet.com.cn Abuse/Security

A listing in the ROKSO database means that this spammer has already been terminated by a minimum of 3 Internet networks for spam offenses. ROKSO spammers are professional spam gangs, they will use every trick in order to stop you from terminating them. Please do not allow your network to be a haven for ROKSO spammers, doing so puts your network in the position of "Knowingly providing spam Support Service".

ROKSO records for HerbalKing (lingsefeidian technology co. ltd.)

Removal Procedure

As this is a known professional spam operation, it is important that all service to the HerbalKing spam operation be terminated before this listing can be removed from the SBL. There can be no functioning web site, mail or DNS server still serving the spam operation in 124.42.123.64/26.

To have record SBL63518 (124.42.123.64/26) removed from the SBL, the Abuse/Security representative of sinnet.com.cn (or the Internet Service Provider responsible for connectivity to 124.42.123.64/26) needs to contact the SBL Team to advise how the spam problem has been terminated.

If you are a representative of sinnet.com.cn, you also need to see this:

Current sinnet.com.cn SBL Listings

Archived

This topic is now archived and is closed to further replies.

Go to topic listing
×
×
  • Create New...