ka112 Posted February 28, 2008 Share Posted February 28, 2008 184.108.40.206/26 is listed on the Register Of Known spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by HerbalKing. lingsefeidian technology co. ltd. Sinnet, why do spammers keep coming back here? Is someone selling them special services to allow them to keep coming back? Is this still Lingsefeidian Technology Co. Ltd. that was hosting spammers since last autumn? 220.127.116.11 is not the only address in this block controlled by spammers. Please remove *all* the spammers from your network and keep them off, permanently. [whois.apnic.net node-2] inetnum: 18.104.22.168 - 22.214.171.124 netname: HUARUI descr: Langfang Development Area Huarui Xintong Network Technology Co., Ltd. descr: Langfang university Langfang Development Area country: CN admin-c: WH271-AP tech-c: WH271-AP mnt-by: MAINT-CNNIC-AP mnt-lower: MAINT-CNNIC-AP mnt-routes: MAINT-CNCGROUP-RR status: ALLOCATED PORTABLE changed: hm-changed[at]apnic.net 20080226 source: APNIC person: Wang Huijun nic-hdl: WH271-AP e-mail: chenbincb[at]sinnet.com.cn address: Langfang university Langfang Development Area phone: +86-13311166160 fax-no: +86-64181819 country: CN changed: ipas[at]cnnic.cn 20080227 mnt-by: MAINT-CNNIC-AP source: APNIC inetnum: 126.96.36.199 - 188.8.131.52 netname: HUARUI descr: Langfang Development Area Huarui Xintong Network Technology Co., Ltd. descr: Langfang university Langfang Development Area country: CN admin-c: WH271-CN tech-c: WH271-CN mnt-lower: MAINT-CN-SINNETHT status: ALLOCATED PORTABLE mnt-by: MAINT-CNNIC-AP changed: ipas[at]cnnic.cn 20080220 source: CNNIC person: Wang Huijun nic-hdl: WH271-CN e-mail: chenbincb[at]sinnet.com.cn address: Langfang university Langfang Development Area phone: +86-13311166160 fax-no: +86-64181819 country: CN changed: ipas[at]cnnic.cn 20080227 mnt-by: MAINT-CNNIC-AP source: CNNIC 184.108.40.206/32 Removed sinnet.com.cn SR02 2008-02-25 10:05:51 SBL63445 your1000credit.com etc. 220.127.116.11/32 Removed sinnet.com.cn SR02 2008-02-15 03:19:55 SBL62960 Leo Kuvayev / BadCow bulletproof hosting 18.104.22.168/29 Removed sinnet.com.cn SR02 2007-11-26 01:06:06 SBL60997 HerbalKing bulletproof hosting (suwolsim.com etc.) 22.214.171.124/26 Pending sinnet.com.cn SR04 2007-11-19 03:00:53 SBL60799 Lingsefeidian technology co. ltd. - spammer hosts 126.96.36.199/32 Removed sinnet.com.cn SR04 2007-11-05 00:40:28 SBL60130 Spammer DNS & website hosting 188.8.131.52/24 Removed sinnet.com.cn SR02 2007-11-02 08:59:56 SBL60073 HerbalKing HerbalKing [at] 184.108.40.206 220.127.116.11/32 Removed sinnet.com.cn SR02 2007-10-31 07:16:40 SBL60033 HerbalKing replica watch fraud 18.104.22.168/32 Removed sinnet.com.cn SR02 2007-10-30 04:05:22 SBL59931 HerbalKing TOLMEN STAR ENTERPRISES LTD 22.214.171.124/32 Removed sinnet.com.cn SR02 2007-10-30 03:43:35 SBL59610 HerbalKing EliteHerbal - flemaco.com | pkkclan.com | ns_.roko1dns.com 126.96.36.199/25 Removed sinnet.com.cn SR22 2007-10-30 22:22:56 SBL59114 Dirty block 188.8.131.52/32 Removed sinnet.com.cn SR22 2007-10-30 06:29:03 SBL59113 HerbalKing Spammer DNS - ns4.metdns101.com (Herbalking) 184.108.40.206/32 Removed sinnet.com.cn SR02 2007-10-30 03:34:44 SBL58752 HerbalKing www.corteon.com (HerbalKing) foleire.com A 220.127.116.11 ns1.ns-earthling.com A 18.104.22.168 ns2.ns-earthling.com A 22.214.171.124 ginuka.com NS ns1.ns-earthling.com 9tg9za.com NS ns1.ns-earthling.com teneriiife.com NS ns1.ns-earthling.com jurife.com NS ns1.ns-earthling.com nsogeoge.com NS ns1.ns-earthling.com foleire.com NS ns1.ns-earthling.com vgasuvise.com NS ns1.ns-earthling.com vgieggeg.com NS ns1.ns-earthling.com nbosoeogeg.com NS ns1.ns-earthling.com ns1.ns-earthling.com A 126.96.36.199 ns1.ns-earthling.com A 188.8.131.52 ns1.ns-earthling.com A 184.108.40.206 riddli.com NS ns1.ns-earthling.com 87flhfnsl.com NS ns1.ns-earthling.com pooelsheen.com NS ns1.ns-earthling.com ureshapen.com NS ns1.ns-earthling.com weverter.com NS ns1.ns-earthling.com ravestomoes.com NS ns1.ns-earthling.com suvetares.com NS ns1.ns-earthling.com dumonaeses.com NS ns1.ns-earthling.com neverenoughsizes.com NS ns1.ns-earthling.com qeguegis.com NS ns1.ns-earthling.com lopkoess.com NS ns1.ns-earthling.com wolploess.com NS ns1.ns-earthling.com sooolss.com NS ns1.ns-earthling.com frontbrots.com NS ns1.ns-earthling.com numurests.com NS ns1.ns-earthling.com begtous.com NS ns1.ns-earthling.com holapoeit.com NS ns1.ns-earthling.com floucst.com NS ns1.ns-earthling.com craonnu.com NS ns1.ns-earthling.com troply.com NS ns1.ns-earthling.com --- reading URL http://immogi.com/ --- contacting host immogi.com [220.127.116.11] on port 80 HTTP/1.1 200 OK Date: Wed, 27 Feb 2008 08:19:23 GMT Server: Apache/2.0.58 (Unix) mod_ssl/2.0.58 OpenSSL/0.9.7f PHP/4.4.7 Connection: close Set-Cookie: AFF=3088119236; expires=Wed, 05-Mar-2008 08:19:23 GMT Set-Cookie: DOM=immogi.com; expires=Wed, 05-Mar-2008 08:19:23 GMT Set-Cookie: OPT=O; expires=Wed, 05-Mar-2008 08:19:23 GMT Set-Cookie: PAGE=1426447528; path=/ Content-type: text/html Content-Length: 21159 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <title>VPXL - Penis Enlargement Made Easy</title> Notes for sinnet.com.cn Abuse/Security A listing in the ROKSO database means that this spammer has already been terminated by a minimum of 3 Internet networks for spam offenses. ROKSO spammers are professional spam gangs, they will use every trick in order to stop you from terminating them. Please do not allow your network to be a haven for ROKSO spammers, doing so puts your network in the position of "Knowingly providing spam Support Service". ROKSO records for HerbalKing (lingsefeidian technology co. ltd.) Removal Procedure As this is a known professional spam operation, it is important that all service to the HerbalKing spam operation be terminated before this listing can be removed from the SBL. There can be no functioning web site, mail or DNS server still serving the spam operation in 18.104.22.168/26. To have record SBL63518 (22.214.171.124/26) removed from the SBL, the Abuse/Security representative of sinnet.com.cn (or the Internet Service Provider responsible for connectivity to 126.96.36.199/26) needs to contact the SBL Team to advise how the spam problem has been terminated. If you are a representative of sinnet.com.cn, you also need to see this: Current sinnet.com.cn SBL Listings Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.