Register Of Known Spam Operations (ROKSO) Spam Operation: Canadian Pharmacy 91.209.58.0/24 is listed on the SBL as being assigned to, being under the control of, or being otherwise connected with a known spam operation listed on the ROKSO database as: Canadian Pharmacy Dirty block No one should route blocks like this. Netelligent.ca was. --- ns2.coolexcite.com A 91.209.58.44 ns2.camppoem.com A 91.209.58.44 ____ 91.209.58.51/32 Live netelligent.ca SR22 2009-02-28 13:01:32 SBL73114 Spam webhosting - lowprice-meds.net 91.209.58.50/32 Live netelligent.ca SR20 2009-02-19 00:35:40 SBL72740 Canadian Pharmacy Canadian Pharmacy sites 91.209.58.2/32 Live netelligent.ca SR20 2009-02-19 00:39:26 SBL72739 Canadian Pharmacy Canadian Pharmacy sites 91.209.58.0/29 Removed fiord.ru SR20 2009-02-08 08:02:29 SBL71689 Canadian Pharmacy Canadian Pharmacy site --- % Information related to '91.209.58.0 - 91.209.58.255' inetnum: 91.209.58.0 - 91.209.58.255 netname: ADVICE-NET descr: Advice Land Ltd country: RU org: ORG-ALL2-RIPE admin-c: KD1275-RIPE tech-c: KD1275-RIPE status: ASSIGNED PI mnt-by: RIPE-NCC-HM-PI-MNT mnt-lower: RIPE-NCC-HM-PI-MNT mnt-by: ADVICE-MNT mnt-routes: ADVICE-MNT mnt-domains: ADVICE-MNT source: RIPE # Filtered organisation: ORG-ALL2-RIPE org-name: Advice Land Ltd org-type: OTHER address: Dekabristov 6 address: Saint-Petersburg, Russia phone: +7911 9119715 e-mail: kngudkoff@list.ru mnt-ref: ADVICE-MNT mnt-by: ADVICE-MNT source: RIPE # Filtered person: Konstantin Gudkov address: Dekabristov 6 address: Saint-Petersburg, Russia phone: +7911 9119715 e-mail: kngudkoff@list.ru nic-hdl: KD1275-RIPE source: RIPE # Filtered --- ns4.alivemover.com 91.209.58.3 ns4.alwaysusual.com 91.209.58.3 ns4.basicspread.com 91.209.58.3 ns4.bitsfirst.com 91.209.58.3 ns4.bottomwhose.com 91.209.58.3 ns4.brightspirituality.com 91.209.58.3 ns4.bringgas.com 91.209.58.3 ns4.campcondition.com 91.209.58.3 ns4.catresolution.com 91.209.58.3 ns4.compassionneighbor.com 91.209.58.3 ns4.correctdry.com 91.209.58.3 ns4.dearhalf.com 91.209.58.3 ns4.facedry.com 91.209.58.3 ns4.fishposition.com 91.209.58.3 ns4.flairneed.com 91.209.58.3 ns4.frontsuffix.com 91.209.58.3 ns4.gaveability.com 91.209.58.3 ns4.groundsign.com 91.209.58.3 ns4.hardevery.com 91.209.58.3 ns4.holdforgiveness.com 91.209.58.3 ns4.hottradition.com 91.209.58.3 ns4.includemodern.com 91.209.58.3 ns4.integrityquenching.com 91.209.58.3 ns4.integrityseven.com 91.209.58.3 ns4.jumpmountain.com 91.209.58.3 ns4.legacydetermine.com 91.209.58.3 ns4.longhad.com 91.209.58.3 ns4.mindsmooths.com 91.209.58.3 ns4.motivationbell.com 91.209.58.3 ns4.neckforgiveness.com 91.209.58.3 ns4.offerrow.com 91.209.58.3 ns4.ofwear.com 91.209.58.3 ns4.pairsize.com 91.209.58.3 ns4.patternif.com 91.209.58.3 ns4.pullstead.com 91.209.58.3 ns4.quietopposite.com 91.209.58.3 ns4.quiettop.com 91.209.58.3 ns4.reasonblack.com 91.209.58.3 ns4.secondfight.com 91.209.58.3 ns4.setwisdom.com 91.209.58.3 ns4.shortpossible.com 91.209.58.3 ns4.sidethat.com 91.209.58.3 ns4.splendidfashionable.com 91.209.58.3 ns4.suffixamong.com 91.209.58.3 ns4.tablelegacy.com 91.209.58.3 ns4.tactfultingle.com 91.209.58.3 ns4.tailcolumn.com 91.209.58.3 ns4.throwpost.com 91.209.58.3 ns4.tirechoose.com 91.209.58.3 ns4.trianglearrive.com 91.209.58.3 ns4.ultraace.com 91.209.58.3 ns4.upliftingadvocacy.com 91.209.58.3 ns4.usdecide.com 91.209.58.3 ns4.wearisland.com 91.209.58.3 ns4.wouldgave.com 91.209.58.3 ns4.writtenflower.com 91.209.58.3 ns4.yesreceive.com 91.209.58.3 ns4.awarepure.com 91.209.58.3 ns4.crispvip.com 91.209.58.3 ns4.maxilucid.com 91.209.58.3 ns4.piouspride.com 91.209.58.3 ns4.wowreap.com 91.209.58.3 --- http://91.209.58.2 - - 403 Access Forbidden http://91.209.58.3 - - 403 Access Forbidden http://91.209.58.50 - - 403 Access Forbidden http://91.209.58.51 - - 403 Access Forbidden http://91.209.58.52 - - 403 Access Forbidden http://91.209.58.53 - - 403 Access Forbidden http://91.209.58.54 - - 403 Access Forbidden

Notes for RIPE Abuse/Security

A listing in the ROKSO database means that this entity has already been terminated by a minimum of 3 Internet networks for serious AUP violations. ROKSO spammers are professional spammers who will use every trick to try to stop you from terminating them. You can not issue "warnings" to ROKSO spammers, they treat warnings as simply opportunities to get even more spam out before the account is gone. To protect your network it is important that you read the ROKSO records of your customer now. See: ROKSO records for Canadian Pharmacy

Removal Procedure

As this listing is of part of a known ROKSO spam operation, Spamhaus can not remove this SBL listing if there is any functioning web site, mail server or DNS server still serving the spam operation in 91.209.58.0/24.

To have record SBL73115 (91.209.58.0/24) removed from the SBL, the Abuse/Security representative of RIPE (or the Internet Service Provider responsible for supplying connectivity to 91.209.58.0/24) needs to contact the SBL Team by email (use this link) to explain how the spam problem has been terminated (we need to know exactly how you have terminated the problem). If the spam problem that caused this listing has been verifiably terminated we will normally remove the listing from the SBL without delay.

It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the Subject: