Register Of Known Spam Operations (ROKSO) Spam Operation: zombies 132.240.0.0/16 is listed on the SBL as being assigned to, being under the control of, or being otherwise connected with a known spam operation listed on the ROKSO database as: zombies Hijacked Netblock This netblock appears to Spamhaus to be hijacked. Very high volumes of spam coming from it, from freshly-registered anonymous 'nonsense' domains. As a precaution Spamhaus is listing the netblock until we have satisfactory information to determine its ownership status. (The rightful owner of this /16 netblock is Oracle Corporation. Spamhaus will release this listing once Oracle notifies us they have successfully recovered it from the hijacker) See also: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL78129 --- OrgName: Vitalink Communications OrgID: VITALI Address: 435 Washington Street City: Somerville StateProv: MA PostalCode: 02143 Country: US NetRange: 132.240.0.0 - 132.240.255.255 CIDR: 132.240.0.0/16 NetName: VITALINK NetHandle: NET-132-240-0-0-1 Parent: NET-132-0-0-0-0 NetType: Direct Assignment NameServer: NS1.VITALINKLLC.COM NameServer: NS2.VITALINKLLC.COM Comment: RegDate: 1989-03-27 Updated: 2008-07-08 _______________________________________ Domain Name: VITALINKLLC.COM Registrar: REBEL.COM CORP. Whois Server: whois.rebel.com Referral URL: http://www.rebel.com Name Server: NS1.DNSPARK.NET Name Server: NS2.DNSPARK.NET Name Server: NS3.DNSPARK.NET Name Server: NS4.DNSPARK.NET Name Server: NS5.DNSPARK.NET Status: clientTransferProhibited Status: clientUpdateProhibited Updated Date: 25-apr-2008 Creation Date: 17-apr-2008 Expiration Date: 17-apr-2009 Domain vitalinkllc.com Date Registered: 2008-4-17 Date Modified: 2008-4-25 Expiry Date: 4/17/2009 DNS1: NS1.DNSPARK.NET DNS2: NS2.DNSPARK.NET DNS3: NS3.DNSPARK.NET DNS4: NS4.DNSPARK.NET DNS5: NS5.DNSPARK.NET Registrant Ba14 Robert Antia 191 Weston Road Lincoln MA 01773 US Administrative Contact Ba14 Robert Antia 191 Weston Road Lincoln MA US 01773 7822597927 6176636079 antia@ba14.com Technical Contact Ba14 Robert Antia 191 Weston Road Lincoln MA 01773 US 7822597927 6176636079 antia@ba14.com Registrar: Rebel.com Register your domain now at www.Rebel.com _______________________________________ Tracing the route to 132.240.0.1 1 ae1-3.fra10.ip.tiscali.net (213.200.64.93) [AS 3257] 0 msec 0 msec 0 msec 2 so-0-0-0.mia11.ip.tiscali.net (89.149.186.45) [AS 3257] 124 msec 124 msec 120 msec 3 api-gw.ip.tiscali.net (213.200.73.2) [AS 3257] 136 msec * 132 msec _____________________________________ Routed by: http://cidr-report.org/cgi-bin/as-report?as=AS3257

Notes for ARIN Abuse/Security

A listing in the ROKSO database means that this entity has already been terminated by a minimum of 3 Internet networks for serious AUP violations. ROKSO spammers are professional spammers who will use every trick to try to stop you from terminating them. You can not issue "warnings" to ROKSO spammers, they treat warnings as simply opportunities to get even more spam out before the account is gone. To protect your network it is important that you read the ROKSO records of your customer now. See: ROKSO records for zombies

Removal Procedure

As this listing is of part of a known ROKSO spam operation, Spamhaus can not remove this SBL listing if there is any functioning web site, mail server or DNS server still serving the spam operation in 132.240.0.0/16.

To have record SBL68517 (132.240.0.0/16) removed from the SBL, the Abuse/Security representative of ARIN (or the Internet Service Provider responsible for supplying connectivity to 132.240.0.0/16) needs to contact the SBL Team by email (use this link) to explain how the spam problem has been terminated (we need to know exactly how you have terminated the problem). If the spam problem that caused this listing has been verifiably terminated we will normally remove the listing from the SBL without delay.

It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the Subject: