amuck-landowner

Dear Spamhaus, why can't you group providers right?

DomainBop

Dormant VPSB Pathogen
They've increased their number of IPs by about 50% in the past few months: 720,896 now.

Today's blacklisting of the 23.94.0.0/15 is going to hurt a lot of hosts and end users.  A quick search shows CloudShards, FTPIT, HudsonValleyHost, SSDVPS, LiquidSolutions, McMyHost,GVH, CVPS all have IPs in that range.

LEB/LET's mx records are in that range too... http://mxtoolbox.com/SuperTool.aspx?action=mx%3alowendbox.com&run=toolpage
 

AlexBarakov

Member
Verified Provider
They've increased their number of IPs by about 50% in the past few months: 720,896 now.

Today's blacklisting of the 23.94.0.0/15 is going to hurt a lot of hosts and end users.  A quick search shows CloudShards, FTPIT, HudsonValleyHost, SSDVPS, LiquidSolutions, McMyHost,GVH, CVPS all have IPs in that range.

LEB/LET's mx records are in that range too... http://mxtoolbox.com/SuperTool.aspx?action=mx%3alowendbox.com&run=toolpage
Not exactly sure how you've done your search, however Liquid does not have any ranges in this block. Neither does CloudShards have a range in use from the 23.94.0.0/15 block.
 

DomainBop

Dormant VPSB Pathogen
Not exactly sure how you've done your search, however Liquid does not have any ranges in this block. Neither does CloudShards have a range in use from the 23.94.0.0/15 block.
My listing of CloudShards was based on a current Spamhaus SBL and the ARIN SWIP info for the IP:

http://www.spamhaus.org/sbl/query/SBL221229 23.94.69.18/31

http://whois.arin.net/rest/net/NET-23-94-69-0-1/pft

a total of 5 IP ranges in that /15 are currently SWIPed to CloudShards http://whois.arin.net/rest/org/CS-285/nets

ColoCrossing has a habit of never updating SWIP info though.  There were still IPs SWIPed to End of Reality a year after they left
 

AlexBarakov

Member
Verified Provider
My listing of CloudShards was based on a current Spamhaus SBL and the ARIN SWIP info for the IP:

http://www.spamhaus.org/sbl/query/SBL221229 23.94.69.18/31

http://whois.arin.net/rest/net/NET-23-94-69-0-1/pft

a total of 5 IP ranges in that /15 are currently SWIPed to CloudShards http://whois.arin.net/rest/org/CS-285/nets

ColoCrossing has a habit of never updating SWIP info though.  There were still IPs SWIPed to End of Reality a year after they left
I stand corrected here. My mistake :)

However I am certain that Liquid currently does not have anything in that range.
 

DomainBop

Dormant VPSB Pathogen
Fabozo the Clown must have joined his former employer's affiliate program... :p

Subject: Kohl's is rewarding its customers, today

Received-SPF: pass (xxxx: domain of [email protected] designates 198.23.141.220 as permitted sender) client-ip=198.23.141.220;

We're filtering ColoCrossing IPs and automatically submitting their email SPAM to Spamcop as they arrive.  This is the list from just the past few hours:

Submitted: 06/05/2014 17:16:37 +0200:
Kohl's is rewarding its customers, today

( 198.23.141.220 )

Submitted: 5/6/2014, 6:29:51 AM -0400:
World's leading married- dating-service for (discreet encounters.)

( 192.3.42.155 )

Submitted: 5/6/2014, 6:25:08 AM -0400:
You may Save More with the HARP Refi Program

( 192.3.42.151 )

Submitted: 5/6/2014, 2:46:06 AM -0400:
#1 Tip To Perfect Skin - REVEALED by Oz Show


( 192.3.42.149 )

Submitted: 5/6/2014, 2:40:38 AM -0400:
Hi, 50% off Flowers for Mom


( 192.3.42.146 )

I predict some more large blocks being blacklisted by Spamhaus soon... 

The comment spam bot problem from ColoCrossing IPs is also getting worse: http://cleantalk.org/blacklists/AS36352

Congratulations to Jon Biloh and his sidekick Alex Vial for creating the U.S. equivalent of Ecatel.  *spits*
 

nunim

VPS Junkie
Time for a little update:

As of today, Velocity Servers is now listed on Spamhaus's "The World's Worst ISPs" list at #6 with 45 SBL listings.

http://www.spamhaus.org/statistics/networks/
CC is the top sender according to SenderBase which I find to be quite accurate:

aa0378.png
 
Last edited by a moderator:

drmike

100% Tier-1 Gogent
Did anyone see this range on spamhaus of CC?

107.172.0.0/15
Did I see that range listed by Spamhaus?  No.  But my logging only goes back a few months.  March 11th to be exact....

Wait... I see it... I think
 
Last edited by a moderator:

drmike

100% Tier-1 Gogent
Unsure why the range isn't in my database... Bug in code...

SBL214220


107.172.0.0/15

velocity-servers.net


25-Feb-2014 10:39 GMT


snowshoe range



Now, this is at least the second /15 listed by Spamhaus since I started logging:

'2014140503-1838' ; 'SBL221319' ; '0' ; '' ; '023.94.0.0/15' ; '023.94.0.0' ; '0' ; '' ; 'OrgName:        ColoCrossing
 
 

drmike

100% Tier-1 Gogent
... and back to the original idea behind this post.... Spamhaus WAS NOT counting ChicagoVPS and probably some other companies abuse under CC, even though they solely use CC for IPs and network.

Well, been looking recently and the ChicagoVPS items seem to be filed now under CC, properly.

Which has caused CC to go up in abuse totals and rank....

Thanks to whoever at Spamhaus who took notice and cleaned this up :)
 

DomainBop

Dormant VPSB Pathogen
... and back to the original idea behind this post.... Spamhaus WAS NOT counting ChicagoVPS and probably some other companies abuse under CC, even though they solely use CC for IPs and network.

Well, been looking recently and the ChicagoVPS items seem to be filed now under CC, properly.

Which has caused CC to go up in abuse totals and rank....

Thanks to whoever at Spamhaus who took notice and cleaned this up :)

It probably bears repeating what Spamhaus has said about Velocity Servers Inc / ColoCrossing (#4 on the Spamhaus World's Worst ISPs list) and their ilk:

The networks listed on this page knowingly provide service to criminal spam gangs and ignore spam reports from anti-spam systems and Internet users. These networks are defacto Spam Havens from where spammers operate freely and with the full knowledge of the network administrators and the executives. In the name of profits, these ten networks turn a blind eye to criminal spam gangs on their networks.
http://www.spamhaus.org/statistics/networks/
 

coreyman

Active Member
Verified Provider
Unsure why the range isn't in my database... Bug in code...

SBL214220 107.172.0.0/15 velocity-servers.net 25-Feb-2014 10:39 GMT snowshoe range


Now, this is at least the second /15 listed by Spamhaus since I started logging:

'2014140503-1838' ; 'SBL221319' ; '0' ; '' ; '023.94.0.0/15' ; '023.94.0.0' ; '0' ; '' ; 'OrgName:        ColoCrossing
Wow... that's a ton of addresses! 128,000!!
 

drmike

100% Tier-1 Gogent
This is worth a read: ChicagoVPS customer (and ROKSO listee) James Carner claims a first amendment right to SPAM :p

http://www.spamhaus.org/rokso/evidence/ROK9814/james-carner-ehygienics/claims-a-first-amendment-right-to-send-spam
Wow!  Unsure where Spamhaus sourced this from, but this guy, yeah... Free speech... I love how companies, commerce driven, usually limited liability, intentionally divided from a soul infected human, claim at law and in public courts of opinion the concept that they have "freedom of speech".

James Carner / eHygienics


Evidence Menu:

shad02.gif
James Carner / eHygienics Index
shad02.gif


Country: United States


State: OR



James Carner is a spammer who spams to advertise his harvested email lists and email listwashing service. He claims to be able to remove Spamhaus spamtraps from any list of email addresses. However, this service does not work very well since we catch him spamming all the time. Formerly known as Quickie Marketing.
shad02.gif


James Carner / eHygienics SBL Listings History

pointer.gif
Current SBL Listings

pointer.gif
Archived SBL Listings
shad02.gif
Claims a First Amendment right to send spam
shad02.gif


James Carner says it's his First Amendment right to send spam, among other choice quotes.


TVS Weekly Newsletter - 84,000 Readers & Growing


James Carner - Editor


[email protected]


Two of every three office e-mails are spam AND THIS STAT IS BULLSHIT


Spam Loses Corporations Money


Well wipe my ass with coleslaw


Guess who, it's James Carner. When I see articles like


"Two of every three office e-mails are spam" I tend to wonder how


these numb nuts get their statistics. First of all, the reason


employees gets spam is because they are crappy employees who are


surfing the web instead of doing their freakin jobs. Instead of


blaming spam, let's blame the dill hole who hired that employee and gave


them internet access to buy penis enlargements. Spam is not to blame.


I own two companies and combined I get 1 Christmas tree


of junk direct mail every day. Oh but the time I spend throwing away


all of that mangy stuff is causing a loss of $120 a day. Are we being


serious here? Obviously there must not be enough news to report about


dead Americans on foreign soil or mass corporations supplying the Illuminati


enough money to control the world to focus on such emphasis on unsolicited


emails. Wake up America! The feds say, "Spam away!" because it's


our 1st amendment right of freedom of speech. Yet the States complain


like Britney Spears that they have no time for themselves.


If I had my way,


the spamcop's, spamhaus' and IT geeks would all be placed on their own


little island to complain back and forth to one another. Then


eventually, I would nuke the island and not cry. I am become death...


Back off and let us


put bread on the table and live in a free country you spineless dip-shits!


Instead of complaining about unsolicited emails, why don't you do some good


and plant a tree so that we may cut that down to send you more direct mail.


Fascists!
 
Top
amuck-landowner