Blocklist Removal Center
About Spamhaus  |  FAQs  |  News Blog   
SBL DROP
Associated Documents

Removal Procedure
RIPE

SBL FAQs
SBL Listing Policy
SBL Delisting Policy
How Blocklists Work

Ref: SBL97861
91.217.249.0/24 is listed on the Spamhaus Block List - SBL
91.217.249.0/24 is listed on the Don't Route or Peer List - DROP
2011-01-04 20:14:11 GMT | RIPE
Cybercrime hosting

Based on routing and network information, AS51554 appears to have
been set up in violation on RIPE regulations for the sole purpose
of cybercrime hosting.

inetnum: 91.217.249.0 - 91.217.249.255
netname: LYAHOV-NET
descr: Lyahovich Maksim
country: RU
org: ORG-LM8-RIPE
admin-c: LM10150-RIPE
tech-c: LM10150-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: LYAHOV-MNT
mnt-routes: LYAHOV-MNT
mnt-domains: LYAHOV-MNT
source: RIPE # Filtered

organisation: ORG-LM8-RIPE
org-name: Lyahovich Maksim
org-type: OTHER
descr: Lyahovich Maksim
address: Russia, Lobnya
address: Zarechnaya 18/9
phone: +7 (49627) 62835
admin-c: LM10150-RIPE
tech-c: LM10150-RIPE
mnt-ref: LYAHOV-MNT
mnt-by: LYAHOV-MNT
source: RIPE # Filtered

person: Lyahovich Maksim
address: Russia, Lobnya
address: Zarechnaya 18/9
phone: +7 (49627) 62835
nic-hdl: LM10150-RIPE
mnt-by: LYAHOV-MNT
abuse-mailbox: lyahov.m@smtp.ru
source: RIPE # Filtered



aut-num: AS51554
as-name: LYAHOV-AS
descr: Lyahovich Maksim
org: ORG-LM8-RIPE
import: from AS43659 accept ANY
export: to AS43659 announce AS51554
import: from AS44407 accept ANY
export: to AS44407 announce AS51554
admin-c: LM10150-RIPE
tech-c: LM10150-RIPE
mnt-by: RIPE-NCC-END-MNT
mnt-by: LYAHOV-MNT
mnt-routes: LYAHOV-MNT
changed: hostmaster@ripe.net 20100927
source: RIPE

organisation: ORG-LM8-RIPE
org-name: Lyahovich Maksim
org-type: OTHER
descr: Lyahovich Maksim
address: Russia, Lobnya
address: Zarechnaya 18/9
phone: +7 (49627) 62835
e-mail: lyahov.m@smtp.ru
admin-c: LM10150-RIPE
tech-c: LM10150-RIPE
mnt-ref: LYAHOV-MNT
mnt-by: LYAHOV-MNT
changed: lyahov.m@smtp.ru 20100818
source: RIPE

person: Lyahovich Maksim
address: Russia, Lobnya
address: Zarechnaya 18/9
phone: +7 (49627) 62835
nic-hdl: LM10150-RIPE
mnt-by: LYAHOV-MNT
abuse-mailbox: lyahov.m@smtp.ru
e-mail: lyahov.m@smtp.ru
changed: lyahov.m@smtp.ru 20100818
source: RIPE
__________________________________________

91.217.249.6 newbasket.net
91.217.249.6 oneday20.net
91.217.249.6 dragdreem.net
91.217.249.6 handsof1.net
91.217.249.6 heroid.net
91.217.249.6 hot1tem.net
91.217.249.6 mostfakt.net
91.217.249.6 my1phone.net
91.217.249.6 zoneclone.net
91.217.249.6 zigilion.net
91.217.249.6 wordssalive.net
91.217.249.6 vseyo.net
91.217.249.6 tentooki.net
91.217.249.6 stolen-idea.net
91.217.249.6 stat1on1.net
91.217.249.6 pr0vider.net
91.217.249.6 pomppomp.net
91.217.249.6 our-theme.net
91.217.249.6 coosmos.net
91.217.249.6 connect-i-n.net
91.217.249.6 connand.net
91.217.249.6 coco1n.net
91.217.249.6 car1car2.net
91.217.249.6 cappital.net
91.217.249.6 avtokom.net
91.217.249.6 eyesss.net
91.217.249.10 trafer001.net
91.217.249.10 trafer.net
91.217.249.15 authorizationbook.com
91.217.249.15 websnd.com
91.217.249.16 worldsview.net
91.217.249.16 ndisgen.net
91.217.249.16 develstate.com
91.217.249.16 damptime.com
91.217.249.17 layerboard.com
91.217.249.17 directcentrs.com
91.217.249.18 limeshift.com
91.217.249.18 analystic-google.net
91.217.249.18 websnom.com
91.217.249.20 dnsresl-125-18.cc
91.217.249.21 lkhdsufheoiujdh.net
91.217.249.30 speedofluck.com
91.217.249.30 elfmaster.com
91.217.249.40 vsezae.biz
91.217.249.45 event-odnoklassniki.ru
91.217.249.45 ejcuplo1l0oo0sk8c40s.ru
91.217.249.45 downfatoto.ru
91.217.249.45 domenfoto2010.ru
91.217.249.45 dechkafoto.ru
91.217.249.45 769461285a42a3.ru
91.217.249.45 coolfriendsin.ru
91.217.249.45 bannalive.ru
91.217.249.45 babyskacity.ru
91.217.249.45 a8cooo8k4ws88c.ru
91.217.249.45 8coo8k4ws88cg48.ru
91.217.249.45 mediamaeket.ru
91.217.249.45 insertfoto.ru
91.217.249.45 i3345d7b859a9108.ru
91.217.249.45 i16410120df2ab6dd.ru
91.217.249.45 holiday-odnoklassniki.ru
91.217.249.45 hetiolan.ru
91.217.249.45 heartmeat.ru
91.217.249.45 hahaland.ru
91.217.249.45 gertafoto.ru
91.217.249.45 gagagafat.ru
91.217.249.45 fotomania2010.ru
91.217.249.45 fete-odnoklassniki.ru
91.217.249.45 feast-odnoklassniki.ru
91.217.249.45 758036-x1cea13d.ru
91.217.249.45 6526414-175042.ru
91.217.249.45 63579c49d450.ru
91.217.249.45 0oo0sk8c48osc4.ru
91.217.249.45 101237fc3b5948c2.ru
91.217.249.45 5d7b859a9108.ru
91.217.249.45 12012881af912ba919d.ru
91.217.249.45 120990bbf53b102.ru
91.217.249.45 12fdb98fbb43bef6.ru
91.217.249.45 24okgvia8cooo8k4ws88.ru
91.217.249.45 2011-odnoklassniki.ru
91.217.249.45 213684-182853.ru
91.217.249.45 2152-13324255.ru
91.217.249.45 09d50310290.ru
91.217.249.45 012829671cd055bd7.ru
91.217.249.45 250df12ab6dd03b4.ru
91.217.249.45 3684-155228309.ru
91.217.249.45 580361xafd11a90.ru
91.217.249.45 50123ba03920675f.ru
91.217.249.45 4okgvia8cooo8k4ws88cg.ru
91.217.249.45 4od-od.ru
91.217.249.45 39b236ebf304c2.ru
91.217.249.45 33519471-10459.ru
91.217.249.45 2f18b7d419e7c30.ru
91.217.249.45 2b1ef0623d138b.ru
91.217.249.45 26414-175042626.ru
91.217.249.45 23fd33cd28o.ru
91.217.249.45 murkanasha.ru
91.217.249.45 mynewpass.com
91.217.249.45 ru-o-d.ru
91.217.249.45 sexyfotochka2010.ru
91.217.249.45 surprise-odnoklassniki.ru
91.217.249.45 teberiumvko.ru
91.217.249.45 tenasko.ru
91.217.249.45 vaulttech13.cn
91.217.249.45 vkokntate.ru
91.217.249.45 vkokokodear.ru
91.217.249.45 vkotntake.ru
91.217.249.45 vktonakte.ru
91.217.249.45 vktonatke.ru
91.217.249.45 xmas-odnoklassniki.ru
91.217.249.45 yule-odnoklassniki.ru
91.217.249.45 zimanaod.ru
91.217.249.45 vkonkatkte.ru
91.217.249.45 rotatefoto.ru
91.217.249.45 retushok.ru
91.217.249.45 retushka.ru
91.217.249.45 nanosolutionssoft.com
91.217.249.45 nashavkonte1.ru
91.217.249.45 nashedevka.ru
91.217.249.45 natashka10.ru
91.217.249.45 nerdolong.ru
91.217.249.45 newyearmail.ru
91.217.249.45 ng-odnoklassniki.ru
91.217.249.45 noel-odnoklassniki.ru
91.217.249.45 nomerov.com
91.217.249.45 reketfoto.ru
91.217.249.45 reginfoto.ru
91.217.249.45 perlamutratoro.com
91.217.249.45 onlinetreet.ru
91.217.249.45 od-20-11.ru
91.217.249.45 o-d-4.ru
91.217.249.50 cn89212.com
91.217.249.55 yyeeeabwao6.co.cc
91.217.249.55 gdsdgsg3.co.cc
91.217.249.55 gdfghsd4.co.cc
91.217.249.55 esdgsdg2.co.cc
91.217.249.55 asgasgag6.co.cc
91.217.249.66 yandextop.com
91.217.249.66 yandexstats.com
91.217.249.66 liveintarnet.com
91.217.249.66 liueinternet.com
91.217.249.66 dns3rec.com
91.217.249.66 climover.com
91.217.249.130 hobbopum.com
91.217.249.135 fast-host-up.com
91.217.249.136 configuremake.com
91.217.249.136 99sameqe.com
91.217.249.136 98saeqldde.com
91.217.249.136 988wddd.com
91.217.249.136 97hhkkdd.com
91.217.249.136 96jsupp.com
91.217.249.136 95dddeee.com
91.217.249.136 dialogmanpages.com
91.217.249.136 entertopid.com
91.217.249.136 fusiondecortab.com
91.217.249.136 sawql3hoo.com
91.217.249.136 ulso29sl.com
91.217.249.136 splashdebian.com
91.217.249.136 realrootpanic.com
91.217.249.136 onlinebargnome.com
91.217.249.136 minicomporttty.com
91.217.249.136 inittabpsi.com
91.217.249.136 half45saum.com
91.217.249.136 grubconfigroot.com
91.217.249.138 labeldiskspacer.com
91.217.249.138 x3mperewws0.com
91.217.249.138 safenetpro99.com
91.217.249.138 rutgerdaumans.com
91.217.249.138 retlomasdak.com
91.217.249.138 reseration200.com
91.217.249.138 poliretrosad.com
91.217.249.138 oprtionalstest.com
91.217.249.138 onlyonyx10.com
91.217.249.138 onlineporlasder.com
91.217.249.138 omnialightsd.com
91.217.249.138 olddesingqutim.com
91.217.249.138 okinalodiretro.com
91.217.249.138 noklagameses.com
91.217.249.138 noklagamesall.com
91.217.249.138 sofderportal.com
91.217.249.138 someabout000.com
91.217.249.138 wificlockstop.com
91.217.249.138 waches999pro.com
91.217.249.138 tutoripolkand.com
91.217.249.138 totalmcdrbat.com
91.217.249.138 topsallers00.com
91.217.249.138 tmabrodcasturl.com
91.217.249.138 tesianderlist.com
91.217.249.138 tertiskotr.com
91.217.249.138 swalkcommon.com
91.217.249.138 surpatester.com
91.217.249.138 support1566.com
91.217.249.138 stubewerss.com
91.217.249.138 sometwsh0ws.com
91.217.249.138 noklagames.com
91.217.249.138 nokiengames.com
91.217.249.138 10ewwqo.com
91.217.249.138 grepotreiser.com
91.217.249.138 gamesallnokia.com
91.217.249.138 friday9999.com
91.217.249.138 fiwerewares.com
91.217.249.138 fastuppp21.com
91.217.249.138 deseprotikast.com
91.217.249.138 deportamentlsd.com
91.217.249.138 assassinsssss.com
91.217.249.138 allnoklagame.com
91.217.249.138 allnoklagam.com
91.217.249.138 allgamesnokla.com
91.217.249.138 algamenokia.com
91.217.249.138 9999fewjjw.com
91.217.249.138 homoloslupolos.com
91.217.249.138 ifrouteconfig.com
91.217.249.138 nokiaallgames.com
91.217.249.138 newvegas9999.com
91.217.249.138 minicortewoasd.com
91.217.249.138 masaaaloaa.com
91.217.249.138 loxrusaa.com
91.217.249.138 losssaaa.com
91.217.249.138 lommetot300.com
91.217.249.138 lmwsaaalw.com
91.217.249.138 inkectoliburl.com
91.217.249.138 internedfedess.com
91.217.249.138 irdascsi.com
91.217.249.138 jenifresteals.com
91.217.249.138 korecdortions.com
91.217.249.138 legendstopret.com
91.217.249.139 qweszafred.com
91.217.249.139 polredjuyxsd.com
91.217.249.139 polkijtyg.com
91.217.249.139 poliuhresdor.com
91.217.249.139 oirutu384u.com
91.217.249.139 loktrecxd.com
91.217.249.139 r3hriuhifudf.com
91.217.249.139 rorhodifhce.com
91.217.249.139 rpjnww4vgfpor.com
91.217.249.139 rtikiwedres.com
91.217.249.139 sazdesqaw.com
91.217.249.139 sederewed.com
91.217.249.139 talkinglin.com
91.217.249.139 tyhdertyg.com
91.217.249.139 wedsertuy.com
91.217.249.139 lokredtyu.com
91.217.249.139 initialpack.com
91.217.249.139 iert23sndr.com
91.217.249.139 34ihjdnffs.com
91.217.249.139 34oe3irjdfd.com
91.217.249.139 allprocsysnet.com
91.217.249.139 bestlinproc.com
91.217.249.139 er3irtejlfef.com
91.217.249.139 er3orhjed.com
91.217.249.139 ereojfdodp.com
91.217.249.139 erknj4tfsrggrt.com
91.217.249.139 erpejt4itne.com
91.217.249.139 fel4p6ihfswt.com
91.217.249.139 fneprnin3r.com
91.217.249.139 fullbestsystem.com
91.217.249.139 gfrlokase.com
91.217.249.139 hyuredtyhsew.com
91.217.249.139 24jopsfjdfx.com
91.217.249.139 wejbncgprt.com
91.217.249.139 werjikolaser.com
91.217.249.139 fbeior4s4d.com
91.217.249.139 wservdjhtrs.com
91.217.249.139 wpofgnklgtht.com
91.217.249.139 woeo3nod.com
91.217.249.139 werno3in.com
91.217.249.140 wire-gate.com
91.217.249.140 sipolin.net
91.217.249.140 signalo.net
91.217.249.140 sigiolo.net
91.217.249.140 kinokol.net
91.217.249.140 kinakoi.net
91.217.249.140 killokil.net
91.217.249.140 kailon.net
91.217.249.140 ariolaa.com
91.217.249.140 airiston.net
91.217.249.146 reseption.net
91.217.249.146 k1ak1a.net
91.217.249.146 eleonnora.net
91.217.249.147 k1ak1a.net
91.217.249.147 germofrod.net
91.217.249.147 eleonnora.net
91.217.249.147 de3eign.net
91.217.249.148 hopnas.net
91.217.249.155 kobra5.net
91.217.249.156 rirehhr34e.com
91.217.249.156 rih4ihroie.com
91.217.249.156 rf4enrhe4.com
91.217.249.156 r3josifnonr.com
91.217.249.156 r3ih9he0n.com
91.217.249.156 r38hr8skjr.com
91.217.249.156 3spkjrf43d.com
91.217.249.156 4r904jdbf.com
91.217.249.156 ern438h9.com
91.217.249.156 r09j4rsdrn.com
91.217.249.160 2fenikss.com
91.217.249.160 doejufwen.com
91.217.249.160 8888protw.com
91.217.249.160 sjjweeww10.com
91.217.249.160 sauqpwq2.com
91.217.249.160 updates-nix.com
91.217.249.160 sahbaeow10.com
91.217.249.160 rsa-info.org
91.217.249.160 ololo900.com
91.217.249.160 monday910.com
91.217.249.160 manymany22.com
91.217.249.160 lsaellls10.com
91.217.249.160 ismallosw10.com
91.217.249.160 hdgeoiure.com
91.217.249.160 eoweudf.com
91.217.249.160 222mios.com
91.217.249.160 ssn-much.com
91.217.249.160 00a9wek.com
91.217.249.160 ssh000s.com
91.217.249.166 x-pressjobs.com
91.217.249.166 unitedecareers.eu
91.217.249.167 aspiriniko.ru
91.217.249.167 rodrigas777.ru
91.217.249.167 oriflament.ru
91.217.249.167 ocmande222.ru
91.217.249.167 klinokwert.ru
91.217.249.167 weriboob.ru
91.217.249.167 derejablik.ru
91.217.249.167 basildomut.ru
91.217.249.167 derttttt.ru
91.217.249.167 qazino.ru
91.217.249.168 landofrent.ru
91.217.249.168 palksrun.ru
91.217.249.168 uskamalchik.ru
91.217.249.168 twiterbd.ru
91.217.249.168 ticketvoice.ru
91.217.249.168 ukadevochka.ru
91.217.249.168 skylineonline.ru
91.217.249.168 superboy999.ru
91.217.249.168 mnogofiilok.ru
91.217.249.168 lyambosok.ru
91.217.249.168 crabsland.ru
91.217.249.168 examplename.ru
91.217.249.168 ghostbustards.ru
91.217.249.170 photo-editing.ru
91.217.249.171 dontouchme.ru
91.217.249.171 firstdfyria.com
91.217.249.171 bestwebrecords.ru
91.217.249.172 touristery.com
91.217.249.172 urbanclassicsdesigns.net
91.217.249.174 nl-church1.ru
91.217.249.175 osoloso.net
91.217.249.183 sec7serv999n.net
91.217.249.186 yahii.tk
91.217.249.186 teten.net
91.217.249.186 slon777.net
91.217.249.186 sariusal.net
91.217.249.186 loder.tk
91.217.249.186 landish.net
91.217.249.186 kobra5.net
91.217.249.186 monkeyspower.net
__________________________________________

The following domain names are used to control computers which are
infected with the SpyEye Trojan. SpyEye is a banking Trojan used to
steal credentials for online banking accounts from the victims computer:

McAfee: http://vil.nai.com/vil/content/v_257679.htm
Symantec:
http://www.symantec.com/security_response/writeup.jsp?docid=2010-020216-0135-99
Sophos:
http://www.sophos.com/security/analyses/viruses-and-spyware/trojspyeyeg.html

Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=directcentrs.com
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=domain191.org
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=domain291.org
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=eptuday.com
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=fieldsoflove.cc
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=fightforce.cc
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=glazsystem.net
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=moohop77.org
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=my-trust.net
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=primedyl.com
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=secure-suite.net
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=soundpong.com
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=yooia.net
Evidence: https://spyeyetracker.abuse.ch/monitor.php?host=ziotremze.com



Removal Procedure

To have record SBL97861 (91.217.249.0/24) removed from the SBL, the Abuse/Security representative of RIPE (or the Internet Service Provider responsible for supplying connectivity to 91.217.249.0/24) needs to contact the SBL Team by email (use this link) to explain how the spam problem has been terminated (we need to know exactly how the issue has been dealt with and that this spam problem is fully terminated). If the spam problem that caused this listing has been terminated we will normally remove the listing from the SBL without delay.

It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the email Subject:

If you are a representative of RIPE, you also need to see: Current Live RIPE SBL Listings



The SBL is an international anti-spam system maintained by The Spamhaus Project and used by Internet networks to protect users from spam sources and spam services. The SBL lists only IP addresses (not domains, email addresses, names or anything else). If you are unable to send email to someone due to this SBL listing, please contact your Internet Service Provider and show them this page - your Service Provider needs to contact the Spamhaus SBL team to resolve the issue (if you are not the Internet Service Provider, please do not contact us.)
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy