amuck-landowner

ColoCrossing, Quick to Get Large IP Blocks Issued and Faster to Soil Them

DomainBop

DomainBop

Dormant VPSB Pathogen
ENZU must be using all those IPs for spamming too... Imagine that.
Click to expand...
ENZU isn't SPAM friendly.  Their network staff is just incompetent. :p  I wouldn't be surprised if a lot of those ENZU SPAM sending IPs weren't hijacked IPs and ENZU's staff was completely oblivious to them being hijacked, and even if they knew they were hijacked their late night network staff is too incompetent to know how to recover the hijacked IP (this statement is based on my experience last year when BudgetVM provisioned my VPS with an IP that had been hijacked by some Russian torrent site).

Back to CC, here is a 3 year old thread that proves the allegations that ColoCrossing is a spam friendly host didn't just start when the tinfoil hat wearers at VPSB started posting about the problem (tl;dr ROKSO spammer with 551 ColoCrossing IPs, abuse dep't at CC lies to person who filed complaint about removing spammer....sound familiar) http://forum.spamcop.net/forums/index.php?showtopic=12054
 
Last edited by a moderator:
kaniini

kaniini

Beware the bunny-rabbit!
Verified Provider
DomainBop said:
ENZU isn't SPAM friendly.
Click to expand...
Oh, hell yes they are spam friendly.

It just depends on how you are doing business with them.  If you're some random BudgetVM customer they will smack you, but if you go a different route, they will happily rotate your blocks around, up to several times a day.
 
DomainBop

DomainBop

Dormant VPSB Pathogen
ColoCrossing now with 21 SBLs (including yet another ROKSO today for their friend Yair), and BlueVM and ChicagoVPS get slapped by Spamhaus (this coming after Spamhaus called NewWave Netconnect a spam gang a few days ago)

BlueVM Communications LLC repeatedly providing resource to snowshoe spammers.

Given the constant stream of spam coming from this entity, we strongly invite Spamhaus users to reject any kind of SMTP communication coming from this network, and are therefore applying an SBL advisory on it.
Click to expand...
http://www.spamhaus.org/sbl/query/SBL215652 (/24)

ChicagoVPS repeatedly providing resource to snowshoe spammers.

Given the constant stream of spam coming from this entity, we strongly invite Spamhaus users to reject any kind of SMTP communication coming from this network, and are therefore applying an SBL advisory on it.
Click to expand...
http://www.spamhaus.org/sbl/query/SBL215651 (/24)

http://www.spamhaus.org/sbl/query/SBL215649 (/25)

tl;dr #1: Spamhaus has a honeypot with CC's name on it

tl;dr #2: SPAM is the only reason 2GB/$30 annually is sustainable
 
Aldryic C'boas

Aldryic C'boas

The Pony
peterw said:
Ref: SBL215652
198.12.78.0/24 is listed on the Spamhaus Block List - SBL
2014-03-11 10:33:06 GMT | velocity-servers.net
What?
Click to expand...

Justin Johnson (BlueVM) is the POC for that IP range.

-06:51:33- Wren:~ :: aldryic % whois 198.12.78.15


#


# ARIN WHOIS data and services are subject to the Terms of Use


# available at: https://www.arin.net/whois_tou.html


#


#


# The following results may also be obtained via:


# http://whois.arin.net/rest/nets;q=198.12.78.15?showDetails=true&showARIN=false&ext=netref2


#


# start


NetRange:       198.12.64.0 - 198.12.127.255


CIDR:           198.12.64.0/18


OriginAS:       AS36352


NetName:        CC-09


NetHandle:      NET-198-12-64-0-1


Parent:         NET-198-0-0-0-0


NetType:        Direct Allocation


RegDate:        2012-07-10


Updated:        2012-07-10


Ref:            http://whois.arin.net/rest/net/NET-198-12-64-0-1


OrgName:        ColoCrossing


OrgId:          VGS-9


Address:        8469 Sheridan Drive


Address:        ATTN: ARIN


City:           Williamsville


StateProv:      NY


PostalCode:     14221


Country:        US


RegDate:        2005-06-20


Updated:        2012-01-10


Ref:            http://whois.arin.net/rest/org/VGS-9


OrgAbuseHandle: ABUSE3246-ARIN


OrgAbuseName:   Abuse


OrgAbusePhone:  +1-800-518-9716


OrgAbuseEmail:  [email protected]


OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE3246-ARIN


OrgNOCHandle: VIALA-ARIN


OrgNOCName:   Vial, Alex


OrgNOCPhone:  +1-800-518-9716


OrgNOCEmail:  [email protected]


OrgNOCRef:    http://whois.arin.net/rest/poc/VIALA-ARIN


OrgTechHandle: NETWO882-ARIN


OrgTechName:   Network Operations


OrgTechPhone:  +1-800-518-9716


OrgTechEmail:  [email protected]


OrgTechRef:    http://whois.arin.net/rest/poc/NETWO882-ARIN


# end


# start


NetRange:       198.12.78.0 - 198.12.78.255


CIDR:           198.12.78.0/24


OriginAS:       AS36352


NetName:        CC-198-12-78-0-24


NetHandle:      NET-198-12-78-0-1


Parent:         NET-198-12-64-0-1


NetType:        Reallocated


RegDate:        2014-02-21


Updated:        2014-02-21


Ref:            http://whois.arin.net/rest/net/NET-198-12-78-0-1


OrgName:        BlueVM Communications LLC


OrgId:          BCL-142


Address:        4945 Mark Dabling Blvd #16


City:           Colorado Springs


StateProv:      CO


PostalCode:     80918


Country:        US


RegDate:        2013-12-02


Updated:        2013-12-02


Ref:            http://whois.arin.net/rest/org/BCL-142


OrgAbuseHandle: JOHNS658-ARIN


OrgAbuseName:   Johnston, Justin


OrgAbusePhone:  +1-850-400-9594


OrgAbuseEmail:  admin@BlueVM.com


OrgAbuseRef:    http://whois.arin.net/rest/poc/JOHNS658-ARIN


OrgNOCHandle: JOHNS658-ARIN


OrgNOCName:   Johnston, Justin


OrgNOCPhone:  +1-850-400-9594


OrgNOCEmail:  admin@BlueVM.com


OrgNOCRef:    http://whois.arin.net/rest/poc/JOHNS658-ARIN


OrgTechHandle: JOHNS658-ARIN


OrgTechName:   Johnston, Justin


OrgTechPhone:  +1-850-400-9594


OrgTechEmail:  admin@BlueVM.com


OrgTechRef:    http://whois.arin.net/rest/poc/JOHNS658-ARIN


# end


#


# ARIN WHOIS data and services are subject to the Terms of Use


# available at: https://www.arin.net/whois_tou.html


#
 
Magiobiwan

Magiobiwan

Insert Witty Statement Here
Verified Provider
Have I mentioned I dislike spam? As soon as I get a refill on my flamethrower, SPAMMERS WILL BURN.
 
drmike

drmike

100% Tier-1 Gogent
CC keeps cleaning their mess, down to 20 Spamhaus listings :(

Funny, Amazon as big as they are, has 3 Spamhaus listings
Quadranet has a mere 3.
DigitalOcean has 11.

To get on the top 10 spam network list currently you need 40-odd active listings.   Here's to encouraging CC to lead the industry!
 
drmike

drmike

100% Tier-1 Gogent
This made me laugh....

APNIC, organization in charge of IP issuance in Asian-Pacific region has 56 member countries and well over 2k members. See this for listing of member organizations - includes some biggies ---> http://en.wikipedia.org/wiki/Asia-Pacific_Network_Information_Centre

APNIC members include the two largest populations of humans anywhere:

China + India.

APNIC has 43 /8's under their control = 

16,777,214 IPs x 43 = 721,420,202 IPs

Their total Spamhaus entries are currently 72. 

72 problems out of 721 million IPs.  Or one bad IP per every 10 million IPs.

Compared to CC who has 492,288 IPs and 20 current Spamhaus listings.

20 problems out of 492,288 IPs....  Or one bad IP per every 24,614 IPs.

Go ahead, tell me CC isn't in the business of selling to spammers again.
 
Last edited by a moderator:
Francisco

Francisco

Company Lube
Verified Provider
Something about the region listings.

Spamhaus only marks things to ARIN/RIPE/APNIC/LANIC, etc, when the problem is so extreme

that they refuse to work with the actual contact and are pushing for IP's to be revoked.

It's common to see zombie ranges, hijacked ranges, etc, to be listed in there.

Francisco
 
DomainBop

DomainBop

Dormant VPSB Pathogen
SBL215802


192.227.165.126/32

velocity-servers.net


12-Mar-2014 09:11 GMT


Snowshoe spam source - 123Systems Solutions

 

SBL215797


192.210.211.68/32

velocity-servers.net


12-Mar-2014 08:45 GMT


Snowshoe spam source - BlueVM Communications

 



SBL215795


172.245.30.76/32

velocity-servers.net


12-Mar-2014 08:43 GMT


Snowshoe spam source - ChicagoVPS




Spamhaus seems to have caught on to the fact that spammers are being offered a package deal by the children at the daycare.  Same replica handbag spammer for all 3 SBLs.
 
A

AlexBarakov

Member
Verified Provider
I sincerely hope that my ranges with them would not get affected by those things. I do not tollerate SPAM myself and we block excesive SMTP connections by default, unless the mailing usage is legit. However I can't say that I like Spamhaus either and to be honest, pretty much all of the reasonable bigger providers that I've worked with are with the same opinion as me (not refering to CC) :)
 
  • Like
Reactions: fm7
MannDude

MannDude

Just a dude
vpsBoard Founder
Moderator
Alex_LiquidHost said:
I sincerely hope that my ranges with them would not get affected by those things. I do not tollerate SPAM myself and we block excesive SMTP connections by default, unless the mailing usage is legit. However I can't say that I like Spamhaus either and to be honest, pretty much all of the reasonable bigger providers that I've worked with are with the same opinion as me (not refering to CC) :)
Click to expand...
I think they're a necessary evil, though in cases like this it's clear that this isn't Spamhaus stepping out of line and being a bully in any way.
 
M

mtwiscool

New Member
MannDude said:
I think they're a necessary evil, though in cases like this it's clear that this isn't Spamhaus stepping out of line and being a bully in any way.
Click to expand...
really so if one person spams the other users can not send emails?

how is this fair?

i had spamhus block my email servers for 2 months because another user in that ip block spammed.

so is this fair?
 
You must log in or register to reply here.
Top
amuck-landowner