Blocklist Removal Center
About Spamhaus  |  FAQs  |  News Blog   
Associated Documents

Removal Procedure
RIPE

ROKSO FAQs
SBL FAQs
SBL Listing Policy
SBL Delisting Policy
How Blocklists Work
Ref: SBL36702
85.255.112.0/20 is listed on the Spamhaus Block List (SBL)

11-May-2009 11:20 GMT | SR04



Register Of Known Spam Operations (ROKSO)
Spam Operation: Rove Digital
85.255.112.0/20 is listed on the SBL as being assigned to, being under the control of, or being otherwise connected with a known spam operation listed on the ROKSO database as: Rove Digital
inhoster, Fast web hosting, esthost, ukrtelegroup, AS36445
One /24 via Pilosoft, the rest via Email at Atrivo/InterCage.

Found a block at NAC.net and 2 at The Planet.

______________

Changed their name, same old spam/crime:

inetnum: 85.255.112.0 - 85.255.127.255
netname: UkrTeleGroup
descr: UkrTeleGroup Ltd.
admin-c: UA481-RIPE
tech-c: UA481-RIPE
country: UA
org: ORG-UL25-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: UKRTELE-MNT
mnt-routes: UKRTELE-MNT
mnt-domains: UKRTELE-MNT
source: RIPE # Filtered

organisation: ORG-UL25-RIPE
org-name: UkrTeleGroup Ltd.
org-type: LIR
address: UkrTeleGroup Ltd.
Mechnikova 58/5
65029 Odessa
Ukraine
phone: +380487311011
fax-no: +380487502499
mnt-ref: UKRTELE-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Andrew Sotov
address: Mechnikova 58/5 65029 Odessa
abuse-mailbox: abuse@ukrtelegroup.com.ua
phone: +380631508855
nic-hdl: UA481-RIPE
source: RIPE # Filtered

________________

inetnum: 85.255.112.0 - 85.255.127.255
netname: inhoster
descr: Inhoster hosting company
descr: OOO Inhoster, Poltavskij Shliax 24, Kharkiv, 61000, Ukraine
remarks: -----------------------------------
remarks: Abuse notifications to: abuse@inhoster.com
remarks: Network problems to: noc@inhoster.com
remarks: Peering requests to: peering@inhoster.com
remarks: -----------------------------------
country: UA
org: ORG-EST1-RIPE
admin-c: AK4026-RIPE
tech-c: AK4026-RIPE
tech-c: FWHS1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: RECIT-MNT
mnt-routes: RECIT-MNT
mnt-domains: RECIT-MNT
mnt-by: DAV-MNT
mnt-routes: DAV-MNT
mnt-domains: DAV-MNT
source: RIPE # Filtered

organisation: ORG-EST1-RIPE
org-name: INHOSTER
org-type: NON-REGISTRY
remarks: *************************************
remarks: * Abuse contacts: abuse@inhoster.com *
remarks: *************************************
address: OOO Inhoster
address: Poltavskij Shliax 24, Xarkov,
address: 61000, Ukraine
phone: +38 066 4633621
e-mail: support@inhoster.com
admin-c: AK4026-RIPE
tech-c: AK4026-RIPE
mnt-ref: DAV-MNT
mnt-by: DAV-MNT
source: RIPE # Filtered

person: Andrei Kislizin
address: OOO Inhoster,
address: ul.Antonova 5, Kiev,
address: 03186, Ukraine
phone: +38 044 2404332
nic-hdl: AK4026-RIPE
source: RIPE # Filtered

person: Fast Web Hosting Support
address: 01110, Ukraine, Kiev, 20Á, Solomenskaya street. room 201.
address: UA
phone: +35 79 91 17 759
e-mail: support@fwebhost.net
nic-hdl: FWHS1-RIPE
source: RIPE # Filtered

_______________

inetnum: 195.95.218.0 - 195.95.219.255
netname: INHOSTER
descr: Fast web hosting
descr: 01110, Ukraine, Kiev, 20., Solomenskaya street. room 201.
remarks: -----------------------------------
remarks: Abuse notifications to: abuse@fwebhost.net
remarks: -----------------------------------
country: UA
org: ORG-FWH1-RIPE
admin-c: FWHS1-RIPE
tech-c: FWHS1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: RECIT-MNT
mnt-routes: RECIT-MNT
mnt-domains: RECIT-MNT
mnt-by: DAV-MNT
mnt-routes: DAV-MNT
mnt-domains: DAV-MNT
source: RIPE # Filtered

organisation: ORG-FWH1-RIPE
org-name: FWEBHOST
org-type: NON-REGISTRY
remarks: *****************************************
remarks: * Abuse contacts: abuse@fwebhost.net *
remarks: *****************************************
address: 01110, Ukraine, Kiev, 20., Solomenskaya street. room 201.
address: UA
phone: +35 79 91 17 759
e-mail: support@fwebhost.net
admin-c: FWHS1-RIPE
tech-c: FWHS1-RIPE
mnt-ref: DAV-MNT
mnt-by: DAV-MNT
source: RIPE # Filtered

person: Fast Web Hosting Support
address: 01110, Ukraine, Kiev, 20Á, Solomenskaya street. room 201.
address: UA
phone: +35 79 91 17 759
e-mail: support@fwebhost.net
nic-hdl: FWHS1-RIPE
source: RIPE # Filtered

_______________

AS | IP | AS Name
26627 | 85.255.112.0 | AS-PILOSOFT - Pilosoft, Inc.
______________

ns1.inhoster.com [85.255.116.238]
ns2.inhoster.com [85.255.116.227]
_____________________

Domain Name: INHOSTER.COM
Registrar: ESTDOMAINS, INC.
Whois Server: whois.estdomains.com
Referral URL: http://www.estdomains.com
Name Server: NS1.INHOSTER.COM
Name Server: NS2.INHOSTER.COM
Status: ACTIVE
Updated Date: 17-may-2006
Creation Date: 01-jun-2005
Expiration Date: 01-jun-2011

Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com

Domain Name: INHOSTER.COM

Registrant:
Inhoster Inc.
Andrei Kislizin (support@inhoster.com)
Lenina str. 23/95
Odessa
,54302
UA
Tel. +38.0664637362
Fax. +38.0664637362

Creation Date: 01-Jun-2005
Expiration Date: 01-Jun-2011

Domain servers in listed order:
ns1.inhoster.com
ns2.inhoster.com


Administrative Contact:
Inhoster Inc.
Andrei Kislizin (support@inhoster.com)
Lenina str. 23/95
Odessa
,54302
UA
Tel. +38.0664637362
Fax. +38.0664637362

Technical Contact:
Inhoster Inc.
Andrei Kislizin (support@inhoster.com)
Lenina str. 23/95
Odessa
,54302
UA
Tel. +38.0664637362
Fax. +38.0664637362

Billing Contact:
Inhoster Inc.
Andrei Kislizin (support@inhoster.com)
Lenina str. 23/95
Odessa
,54302
UA
Tel. +38.0664637362
Fax. +38.0664637362

Status:ACTIVE


_____________


--- DNS Zone Transfer for "inhoster.com", please wait...
--- contacting nameserver: ns1.inhoster.com [85.255.116.238]

inhoster.com MX 10 mail.inhoster.com
inhoster.com A 85.255.116.238
inhoster.com SOA
origin = ns1.inhoster.com
mail addr = support@esthost.com
serial = 1154604531
refresh = 10800 (3 hours)
retry = 3600 (1 hour)
expire = 604800 (7 days)
minimum ttl = 86400 ()
inhoster.com NS ns1.inhoster.com
inhoster.com NS ns2.inhoster.com
mail.inhoster.com A 85.255.116.238
ns1.inhoster.com A 85.255.116.238
ns2.inhoster.com A 85.255.116.227

--- DNS Lookup completed

_______________

Domain Name: FWEBHOST.NET
Registrar: DIRECT INFORMATION PVT LTD D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS.FWEBHOST.NET
Name Server: NS2.FWEBHOST.NET
Status: ACTIVE
Updated Date: 13-aug-2006
Creation Date: 03-aug-2006
Expiration Date: 03-aug-2007

Registration Service Provided By: DOMAINCUSTOMER
Contact: +357.99117759
Website: http://domaincustomer.info

Domain Name: FWEBHOST.NET

Registrant:
N/A
Fast Web Hosting support (support@fwebhost.net)
Timiryazeva 8
Kiew
Kiew,532112
UA
Tel. +38.050223344

Creation Date: 03-Aug-2006
Expiration Date: 03-Aug-2007

Domain servers in listed order:
ns2.fwebhost.net
ns.fwebhost.net


Administrative Contact:
N/A
Fast Web Hosting support (support@fwebhost.net)
Timiryazeva 8
Kiew
Kiew,532112
UA
Tel. +38.050223344

Technical Contact:
N/A
Fast Web Hosting support (support@fwebhost.net)
Timiryazeva 8
Kiew
Kiew,532112
UA
Tel. +38.050223344

Billing Contact:
N/A
Fast Web Hosting support (support@fwebhost.net)
Timiryazeva 8
Kiew
Kiew,532112
UA
Tel. +38.050223344

Status:ACTIVE


--- DNS Zone Transfer for "fwebhost.net", please wait...
--- contacting nameserver: ns.fwebhost.net [216.195.44.248]

fwebhost.net MX 10 mail.fwebhost.net
fwebhost.net SOA
origin = ns.fwebhost.net
mail addr = virtualhosting@0ad.net
serial = 1155460145
refresh = 10800 (3 hours)
retry = 3600 (1 hour)
expire = 604800 (7 days)
minimum ttl = 86400 ()
fwebhost.net NS ns2.3fn.net
fwebhost.net NS ns.fwebhost.net
fwebhost.net A 216.195.44.248
mail.fwebhost.net A 216.195.44.248
ns.fwebhost.net A 216.195.44.248
ns2.3fn.net A 216.195.48.10

--- DNS Lookup completed

_______________

SBL46361 DNSChanger Trojan home

195.95.218.0/23
Live esthost.com SR04
2006-04-11 21:30:13
SBL36703 DNSChanger Trojan home

85.255.114.0/24
Removed atrivo.com SR02
2006-03-22 04:50:11
SBL36471 WMF loaders

195.95.218.0/23
Live esthost.com SR04
2006-04-11 21:30:13
SBL36703 DNSChanger Trojan home

195.95.218.168/29
Removed atrivo.com SR03
2005-10-12 11:43:27
SBL27700 iframedollars.biz trojan master

________________

http://vil.mcafeesecurity.com/vil/content/v_136602.htm

Symptoms

* Presence of the file:
o %SYSTEMROOT%\SYSTEM32\HGQHP.EXE
* Having DNS entries in any of your network adaptors with the values:
o 85.255.112.132
o 85.255.113.13
* Finding traffic targeting:
o 195.95.218.100

______

DNS also @85.255.114.36

[85.255.112.132] spbg9.mydomain.com
[85.255.113.13] mercury.xhpro.com
[85.255.114.36] dns12.esthost.com
[195.95.218.100] annyme.esthost.com

________

AS | IP | AS Name
26627 | 85.255.112.0 | AS-PILOSOFT - Pilosoft, Inc.

AS | IP | AS Name
27595 | 85.255.113.0 | INTERCAGE - InterCage, Inc.

AS | IP | AS Name
27595 | 85.255.114.0 | INTERCAGE - InterCage, Inc.

AS | IP | AS Name
27595 | 85.255.115.0 | INTERCAGE - InterCage, Inc.
________

inetnum: 85.255.112.0 - 85.255.127.255
netname: inhoster
descr: Inhoster hosting company
descr: OOO Inhoster, Poltavskij Shliax 24, Kharkiv, 61000, Ukraine
remarks: -----------------------------------
remarks: Abuse notifications to: abuse@inhoster.com
remarks: Network problems to: noc@inhoster.com
remarks: Peering requests to: peering@inhoster.com
remarks: -----------------------------------
country: UA
org: ORG-EST1-RIPE
admin-c: AK4026-RIPE
tech-c: AK4026-RIPE
tech-c: FWHS1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: RECIT-MNT
mnt-routes: RECIT-MNT
mnt-domains: RECIT-MNT
mnt-by: DAV-MNT
mnt-routes: DAV-MNT
mnt-domains: DAV-MNT
source: RIPE # Filtered

organisation: ORG-EST1-RIPE
org-name: INHOSTER
org-type: NON-REGISTRY
remarks: *************************************
remarks: * Abuse contacts: abuse@inhoster.com *
remarks: *************************************
address: OOO Inhoster
address: Poltavskij Shliax 24, Xarkov,
address: 61000, Ukraine
phone: +38 066 4633621
e-mail: support@inhoster.com
admin-c: AK4026-RIPE
tech-c: AK4026-RIPE
mnt-ref: DAV-MNT
mnt-by: DAV-MNT
source: RIPE # Filtered

person: Andrei Kislizin
address: OOO Inhoster,
address: ul.Antonova 5, Kiev,
address: 03186, Ukraine
phone: +38 044 2404332
nic-hdl: AK4026-RIPE
source: RIPE # Filtered

person: Fast Web Hosting Support
address: 01110, Ukraine, Kiev, 20, Solomenskaya street. room 201.
address: UA
phone: +357 99 117759
e-mail: support@fwebhost.com
nic-hdl: FWHS1-RIPE
source: RIPE # Filtered

_____


inetnum: 195.95.218.0 - 195.95.219.255
netname: ESTHOST
descr: Inhoster hosting company
descr: OOO Inhoster, Poltavskij Shliax 24, Kharkiv, 61000, Ukraine
remarks: -----------------------------------
remarks: Abuse notifications to: abuse@inhoster.com
remarks: Network problems to: noc@inhoster.com
remarks: Peering requests to: peering@inhoster.com
remarks: -----------------------------------
country: UA
org: ORG-EST1-RIPE
admin-c: AK4026-RIPE
tech-c: AK4026-RIPE
tech-c: FWHS1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: RECIT-MNT
mnt-routes: RECIT-MNT
mnt-domains: RECIT-MNT
mnt-by: DAV-MNT
mnt-routes: DAV-MNT
mnt-domains: DAV-MNT
source: RIPE # Filtered

organisation: ORG-EST1-RIPE
org-name: INHOSTER
org-type: NON-REGISTRY
remarks: *************************************
remarks: * Abuse contacts: abuse@inhoster.com *
remarks: *************************************
address: OOO Inhoster
address: Poltavskij Shliax 24, Xarkov,
address: 61000, Ukraine
phone: +38 066 4633621
e-mail: support@inhoster.com
admin-c: AK4026-RIPE
tech-c: AK4026-RIPE
mnt-ref: DAV-MNT
mnt-by: DAV-MNT
source: RIPE # Filtered

person: Andrei Kislizin
address: OOO Inhoster,
address: ul.Antonova 5, Kiev,
address: 03186, Ukraine
phone: +38 044 2404332
nic-hdl: AK4026-RIPE
source: RIPE # Filtered

person: Fast Web Hosting Support
address: 01110, Ukraine, Kiev, 20, Solomenskaya street. room 201.
address: UA
phone: +357 99 117759
e-mail: support@fwebhost.com
nic-hdl: FWHS1-RIPE
source: RIPE # Filtered

___________

http://isc.sans.org/diary.php?storyid=997

<quote>

I hate block lists... maybe because I have been on the 'wrong end' of them in the past. But after careful consideration, we do recommend blocking traffic from these two netblocks:

InterCage Inc.: 69.50.160.0/19 (69.50.160.0 - 69.50.191.255)
Inhoster: 85.255.112.0/20 (85.255.112.0 - 85.255.127.255)

</quote>

_______________


ns.imhoster.net 70.85.136.36
ns0.imhoster.net 70.85.136.36
ns01.xupe.info 70.85.136.36
ns1.bestlittlemodels.com 70.85.136.36
ns1.bobych.info 70.85.136.36
ns1.eeehost.org 70.85.136.36
ns1.heops.us 70.85.136.36
ns1.hostsova.com 70.85.136.36
ns1.military-host.com 70.85.136.36
ns1.xupe.info 70.85.136.36
ns14.xupe.info 70.85.136.36
ns19.xupe.info 70.85.136.36
ns2.xupe.info 70.85.136.36
ns3.imhoster.net 70.85.136.36
ns5.http-host.net 70.85.136.36
www.igorkov.com 70.85.136.36

____________________________________________________________________

2007-10-23 - Atrivo routing unallocated space, i.e. "hijack":

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL59854
____________________________________________________________________

2008-09-09 - Atrivo routing gone.

AS | IP | AS Name
36445 | 85.255.112.0 | CERNEL-ASN - Cernel, Inc

AS36445 CERNEL-ASN - Cernel, Inc
Adjacency: 1 Upstream: 1 Downstream: 0
Upstream Adjacent AS list
AS3257 TISCALI-BACKBONE Tiscali Intl Network BV
____________________________________________________________________








Routing via Atrivo/InterCage's AS27595
Routing via Pilosoft's AS26627

NS0.IMHOSTER.NET
2ru.biz
autosell.biz
goldenrocks.biz
owt-group.biz
sporttour.biz
trading-experts.biz
novorossia.org
onlinetrainingnews.com
gs-region.com
onlinetrainingshop.com
travelpopular.com
usefulhelper.com
seo-inform.com
intraveladvertising.com
imhoster.net
tv-studio.net
http-host.net
narisoval.net
lovehyip.net
balt39.info
brand-watch.info
domiki.info
fashionmypassion.info
finvest.info
gektar.info
kanash.info
kiski.info
krivoruchko.info
razbogatey.info
superdieta.info

@NS5.HTTP-HOST.NET
alcal.biz
fforce.biz
flagman.biz
globaleye.biz
goldhyip.biz
marriageagency.biz
matchfinder.biz
pupsik.biz
seo-master.biz
tops-porno.biz
trustinvestment.biz
wmoney.biz
worldhyip.biz
2youre.org
afreetit.org
alljoinfree.org
alllov.org
americanjetset.org
ampstrike.org
anory.org
appearpop.org
besthitusa.org
bestplaner.org
bestpopcap.org
bestsetusa.org
besttravelplaner.org
bhbelarus.org
bighitbag.org
bighitcd.org
bighitcity.org
bighitsave.org
bigtitmail.org
bigtittime.org
biohitdirect.org
bitfor.org
breasttit.org
centivu.org
cronel.org
cyfral.org
dating4sex.org
datingmillionaire.org
datingseeker.org
dawae.org
dawas.org
dconcept.org
direkttur.org
doirs.org
dosset.org
drbre.org
dukebatepapo.org
dukereview.org
fashiontime.org
fastjetset.org
fotoknigi.org
fptcorp.org
freenel.org
freesitejoin.org
freeteentit.org
geveo.org
gilius.org
gk-imelda.org
goofe.org
greatsetlists.org
greatunite.org
hippopsoda.org
hotreland.org
hyperlov.org
iisre.org
ingleslink.org
interprisedata.org
interprisenetwork.org
interpriseportal.org
joinfreecash.org
joinfreeserve.org
joinindian.org
keete.org
kiuse.org
kiuss.org
koire.org
koirs.org
kooss.org
koreasettop.org
krasmey.org
litetans.org
lolse.org
lolss.org
lorip.org
lovcentral.org
lovecupid.org
lovsite.org
lovwizard.org
lucky-lovers.org
mail-order-brides.org
meemia.org
megaportal.org
meintur.org
melinada.org
metro-date.org
millionaire-dating.org
millionaire-match.org
moddin.org
morelov.org
morerec.org
mukhin.org
musictophit.org
nefsmk.org
nippletit.org
octano.org
ok-cupid.org
oktan.org
oniix.org
oozz.org
partyplanersite.org
passion4men.org
pixonyx.org
planerdirect.org
planerdownload.org
planersoftware.org
planetlov.org
popculturefun.org
popstardns.org
prisedirect.org
prisefinancial.org
prisegroup.org
prisesite.org
qisso.org
quazzy.org
quimbee.org
rec2you.org
recproject.org
reete.org
revra.org
rodim.org
sakhalin-xado.org
second-reality.org
settopkorea.org
sforex.org
singlespersonals.org
skambu.org
sottic.org
superhitbox.org
superjoin.org
superpopcap.org
supertitude.org
suppliesre.org
swetg.org
tehni.org
theplanerblades.org
theplanermill.org
thepopculture.org
thepoppen.org
theprise.org
thesettes.org
toore.org
toors.org
turdirekt.org
turprojekt.org
uniteville.org
usinterprise.org
virtuelltur.org
voolia.org
web-date.org
wenera.org
werdana.org
yanu.org
yondi.org
yourhitmen.org
yourjoin.org
yourpartyplaner.org
yourplaner.org
yourpoppin.org
yourprise.org
yoursetmanagement.org
yoursettel.org
yourtit.org
zakazi.org
zanoodle.org
zavadsky.org
taknado.com
ustinka.com
red-city.com
dermatovenerolog.com
drakasport.com
astroprognoz.com
beltt.com
heplusshe.com
omich.com
nk-real.com
timeforsearch.com
hr-ua.com
khrustalev.com
stankomash.com
azovholod.com
milinkevich.com
softeka.com
krupenino.com
hotlonelyhearts.com
mytopdating.com
topfreedating.com
radugalife.com
brestscooter.com
cruahosting.com
terzihyip.com
loifman.com
vitburvod.com
iaswe.com
profisionalhyip.com
werttraders.com
fondhyip.com
helpershosting.com
wmden.com
dontechresurs.com
goldandhoney.com
antoniohouse.com
military-host.com
zaryadi.com
akkedo.com
host-w.com
nikohyip.com
riskformoney.com
osk-trans.com
webholl.com
apohyip.com
mba-gmat-toefl.com
gamefilmdvd.com
europrobiz.com
meraxe.com
platonschukin.com
job-ua.com
babalu-club.com
corptariff.com
dilory.com
sakhalin-shop.com
portreklama.com
enothost.com
softoteka.com
passion4men.com
sakhalin-school.com
metro-date.com
elcity.net
yapluse.net
ntagil.net
hostow.net
hotsinglesdating.net
hotbrides.net
hotlovefinder.net
happy-couple.net
intercomplect.net
whostw.net
lovesit.net
pro100host.net
informtex.net
datinga.net
siteprom.net
ups-ua.net
passion4men.net
ok-cupid.net
millionaire-dating.net
datingseeker.net
millionaire-match.net
23verse.info
3art.info
42nation.info
5hatki.info
america-singles.info
american-brides.info
american-dating.info
anekdom.info
angara.info
asia-brides.info
asiadating.info
ateentit.info
b1sh0p.info
belbiz.info
besthitman.info
bestlov.info
bestpopgroup.info
besttitude.info
bezposrednikov.info
bigtitloans.info
bk-shans.info
brainfire.info
browseify.info
byepopups.info
casinoxm.info
china-brides.info
combel.info
cxare.info
dabjam.info
dabshare.info
dating-catalog.info
dating-expert.info
dating-world.info
dating-zone.info
dating4sex.info
datingarea.info
datingcatalogue.info
datingexpert.info
datingmillionaire.info
datingsearch.info
davidov.info
dazzlebird.info
dek-art.info
devnation.info
dokole.info
dvdkniga.info
eatssuccess.info
edgetube.info
energy-lab.info
erstestur.info
european-dating.info
european-singles.info
europeanbrides.info
exchangelinkscatalog.info
exchangelinksdirectory.info
ezrehome.info
f13.info
flateam.info
fliplist.info
footballportal.info
forgame.info
freeinterprise.info
gamedvd.info
gaysexdating.info
getsetlogo.info
grayplanermill.info
greathitbox.info
greatpoppin.info
greatraise.info
greatsettop.info
greattitten.info
gribochki.info
gsm-service.info
hitlionline.info
hitmansports.info
hot-dating.info
hot-datingsites.info
hotdatingdirectory.info
hotdatingsearch.info
hotdatingsites.info
hotelrostov.info
hotinternetdating.info
hotwebdating.info
hyperrec.info
idi0t.info
igryshki.info
incredidate.info
innocat.info
inprisesolutions.info
internetdatingsearch.info
interpriseconnect.info
interprisehub.info
jetsetbiz.info
jetsetdays.info
jetsetsky.info
judo-zao.info
kingdating.info
kinodvd.info
kissdate.info
knigga.info
koliton.info
kylinar.info
lamura.info
lesbiansexdating.info
love-access.info
love-dating.info
love-kingdom.info
love-land.info
love-line.info
love77.info
lovecompass.info
lovekingdom.info
lovnation.info
lovproject.info
lucky-lovers.info
luckydating.info
matchluv.info
mate1.info
megadating.info
megafriends.info
megamatch.info
memyself.info
mescalito.info
metro-date.info
metrodate.info
mobilbest.info
mocm.info
moidengi.info
momaturs.info
moretittie.info
mp3disc.info
mukhin.info
musicbighit.info
my-dating.info
my-hot-dating.info
mydatingcatalog.info
mydatingdirectory.info
myinternetdating.info
myrelive.info
netcenterprise.info
newkatalog.info
newre4you.info
nightbrest.info
noytbyki.info
nspot.info
ntagil.info
nu-i.info
officiallov.info
officialrec.info
ok-cupid.info
on-line-games.info
onlinelov.info
passion4men.info
planerdeutschland.info
planersite.info
planerworld.info
planesplaner.info
podarkin.info
popstardance.info
portakomp.info
prisemission.info
prisesolutions.info
priseworld.info
prodengi.info
prokidalovo.info
propartii.info
qtwre.info
realty-center.info
recplanet.info
rloff.info
rusmap.info
russia-brides.info
sanatoriymvd.info
senior-dating.info
settopbank.info
settopsports.info
sexandmoney.info
sexmoneydating.info
shotstrike.info
shtukin.info
skipchat.info
skiplist.info
skipset.info
skiton.info
slaye.info
socionic.info
sotovvik.info
strikehit.info
strikeradio.info
superraise.info
supersetusa.info
svoybiz.info
swissplanermill.info
tagil.info
tagpedia.info
teentittalk.info
tekset.info
theiplaner.info
thepopwarner.info
thesetsubi.info
thetittie.info
thetravelplaner.info
titguide.info
titions.info
top-dating-directory.info
topdating.info
topdatingcatalog.info
topdatingcatalogue.info
topdatingdirectory.info
topicspot.info
travelplanerchile.info
trudating.info
turfirm.info
turplatz.info
turwelt.info
turzentrale.info
tvoydom.info
urkaine.info
usa-singles.info
usabrides.info
usdating.info
usedwoodplaner.info
v-d-v.info
venusdating.info
vipdating.info
virtuallov.info
vittorg.info
vzlom.info
web-date.info
yondi.info
yourpopstars.info
yoursetlists.info
yourtitleist.info
yurfirm.info
zhadan.info

@NS4.INWEB.NAME
100re.biz
procesing.biz
re100re.biz
incestxxx.org
magic-life.org
my4ex.org
officetraning.org
procesing.org
vgxbbs.org
bizcontact.us
ceaser.us
l2power.us
new-bbs.us
bizimbaki.com
esilnet.com
re100re.com
israfact.com
vitojewelry.com
znakomsia.com
eruslan.com
domtele.com
ezidistan.com
ckvhost.com
customcrack.com
gloryons.com
orange-ukraine.com
vazq.com
polosaudachi.com
shopping-all.com
phone2america.com
psynoise.com
sirteam.com
yestida.com
loadingfile.com
vodkawhisky.com
madonnasuperstar.com
seocontents.com
dobawki.com
s6p.net
avarij.net
procesing.net
mylimerick.net
softomat.net
kopov.net
4exbroker.info
4exonline.info
70rus.info
amuhb.info
apoc2004.info
casinoxm.info
cekac.info
chau-chau.info
chepiga.info
cyber-m.info
forex123.info
forexbet.info
forexcabinet.info
forexwork.info
fxbet.info
fxpartner.info
gamedvd.info
gjhjkmmm3.info
globalintermoney.info
gribochki.info
igryshki.info
in-biz.info
infoogo.info
it-teams.info
jnickel.info
jobsender.info
kalina-group.info
kinodvd.info
micro-forex.info
mini-forex.info
mistreria.info
mobilbest.info
mp3all.info
mp3gsm.info
mp3mobil.info
mp3pump.info
my4ex.info
myhyipmonitor.info
nastrip.info
newkatalog.info
noytbyki.info
planet-pantyhose.info
podarkin.info
procesing.info
realestate-all.info
rucd.info
rufirm.info
ruved.info
sanatoriymvd.info
shop-50cents.info
slavaukraini.info
sotovvik.info
telhcar.info
tsymbal.info
ufamobile.info
updateamerica1.info
v-tsoy.info
vavic.info
vip-forex.info
vipforex.info
whiledo.info
worldhotelarenda.info
x-frame.info
xata-if.info
yukunoma.info
zeroday.info
zona-ok.info

@NS2.VOINA.BIZ
antivirus-approaches.org
arendas.org
arrendo.org
aviaperelet.org
banner6x2.org
bestcommand.org
betonmsk.org
blanzer.org
controlplanner.org
credituem.org
currencyout.org
dengiguide.org
dengionline.org
dengisite.org
dengiworld.org
drillertech.org
drop-n-go.org
elektromagnit.org
elektrotool.org
forexcast.org
funddown.org
funnyblog.org
garfild.org
greatbiztech.org
greatdengi.org
gruzovozoff.org
informationsec.org
iroga.org
ivanovo-arenda.org
koroli.org
kroliki.org
lanzert.org
le4im.org
li3ing.org
metabank.org
metabanker.org
miakro.org
mysecondmother.org
nebolei.org
neobiztech.org
notbankrot.org
officearenda.org
plantend.org
podaripodarochek.org
prominvestor.org
propellerheaded.org
reggal.org
reggistracia.org
registres.org
reklamapinguin.org
scaryteeths.org
sdamvam.org
silensed.org
smallcorpbiz.org
snimaem.org
soona.org
superbiztech.org
supertools.org
teambiztech.org
thedengi.org
therelax.org
visacontrol.org
webalto.org
webstandart.org
xarer.org
xezzler.org
xollar.org
yourdengi.org
zacredit.org
zauch.org
usmum.info

@NS4.ART-HOST.ORG
almaz-net.biz
bardake.biz
crystal-net.biz
elent.biz
smokers-choice.biz
viptop.biz
voina.biz
biokron.org
engtopics.org
bestgains.com
vdlyvas.com
cc2gold.com
dohodnoemesto.com
twicesurf.com
kupi-auto.com
skachaivse.com
weare345right.com
javasofta.net
volgohost.net
auto-planet.info
bronze-cat.info
bronze-catalog.info
dirbig.info
doorik.info
firstdie.info
footlog.info
giga-cat.info
giga-dir.info
gurulink.info
hq-cat.info
hq-catalog.info
hq-dir.info
hq-directory.info
hq-place.info
imho-cat.info
imho-catalog.info
imho-links.info
linktrip.info
mega-cat.info
mega-linkplace.info
mega-place.info
notmoscow.info
parkour-by.info
pro-dir.info
real-catalog.info
real-dir.info
real-links.info
sashok.info
sellegoldacc.info
sodks.info
sotlink.info
super-cat.info
u4s.info
volgocity.info
volgomarket.info
webdraft.info
webtrim.info
yarshops.info

@NS2.COLOUR-HOST.COM
businessnewworld.info
dj-fon.com
fma-group.info
hqdoctor.com
imb-clan.com
klikvipsearch.org
listofgoods.org
mashinez.org
opreved.org
scl-group.net
srvdata1.net
yourmarketworld.info

@NS2.FXPULS.COM
abortmsk.org
ac-dc-group.org
ailrine.org
antiviruses-approaches.org
arendats.org
astrabuket.org
d-cooler.org
detox-cost.org
detoxed-shop.org
drivemsk.org
e-magnit.org
epravo.org
f-adultmania.org
f-glavnews.org
f-londonporn.org
f-pornomania.org
f-sugarbabes.org
f-takeitbaby.org
fasad-limited-edition.org
flower-flowers.org
gruz-man.org
house-remont.org
internet-credit.org
ipotech.org
isportclub.org
kipriot.org
klinikimsk.org
kvartirnayaarenda.org
m-salon.org
madfrenzy.org
mircredit.org
mosinvest.org
moskvaabort.org
mosnasos.org
motorister.org
nannymsk.org
nattos.org
new-stroy.org
novostroymsk.org
okna-rosta.org
okna-stekla.org
ooo-club.org
pemoht-mck.org
perevezu.org
pogruz4ik.org
pogruzi.org
potolokmsk.org
puteshestviya.org
razgruzka.org
rosmash.org
ruavtovaz.org
rusearch.org
taxi-motor.org
teplopol.org
the-opium.org
thesputnik.org
trans-port-msk.org
washhome.org
yadnex.org
zubik-msk.org
fxmega.com
fxpuls.com
forexpuls.com

Notes for RIPE Abuse/Security

A listing in the ROKSO database means that this entity has already been terminated by a minimum of 3 Internet networks for serious AUP violations. ROKSO spammers are professional spammers who will use every trick to try to stop you from terminating them. You can not issue "warnings" to ROKSO spammers, they treat warnings as simply opportunities to get even more spam out before the account is gone. To protect your network it is important that you read the ROKSO records of your customer now. See: ROKSO records for Rove Digital

Removal Procedure

As this listing is of part of a known ROKSO spam operation, Spamhaus can not remove this SBL listing if there is any functioning web site, mail server or DNS server still serving the spam operation in 85.255.112.0/20.

To have record SBL36702 (85.255.112.0/20) removed from the SBL, the Abuse/Security representative of RIPE (or the Internet Service Provider responsible for supplying connectivity to 85.255.112.0/20) needs to contact the SBL Team by email (use this link) to explain how the spam problem has been terminated (we need to know exactly how you have terminated the problem). If the spam problem that caused this listing has been verifiably terminated we will normally remove the listing from the SBL without delay.

It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the Subject:


If you are a representative of RIPE, you also need to see: Current Live RIPE SBL Listings



The SBL is an international anti-spam system maintained by The Spamhaus Project and used by Internet networks to protect users from spam sources and spam services. The SBL lists only IP addresses (not domains, email addresses, names or anything else). If you are unable to send email to someone due to this SBL listing, please contact your Internet Service Provider and show them this page - your Service Provider needs to contact the Spamhaus SBL team to resolve the issue (if you are not the Internet Service Provider, please do not contact us.)
© 1998-2010 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy