Subscribe to RSS News Feed
About Spamhaus  |  Press Office  |  FAQs   
RBN as Chinese as Caviar & Borscht

2007-11-16 05:39:00 UTC   |   by Quentin Jenkins   |  
Recent News Articles

Poor sending practices trigger a tidal wave of informational listings

Spamhaus Botnet Threat Update: Q4-2021

SERVICE UPDATE | Spamhaus DNSBL users who query via Cloudflare DNS need to make changes to email set-up

Spamhaus Botnet Threat Update: Q3-2021

Spammer Abuse of Free Google Services

Spamhaus Botnet Threat Update: Q2-2021

Emotet Email Aftermath

Wordpress compromises: What's beyond the URL?


Older News Articles:
Spamhaus News INDEX

When the routes to the older IP address mapped to the Russian Business network began to no longer route on the internet, Spamhaus noticed a new set of IP addresses and ASN numbers mapping into the same upstream network. The Whois data for these showed Chinese company names and .cn/.tw email addresses.

But just because you call yourself Chan does not mean you're not still Ivan. The IP addresses and ASN numbers were obtained from RIPE, the European RIR, who assured Spamhaus that the allocation 'was perfectly correct at the time it was made under existing RIPE rules and procedures'.

Spamhaus posted this data in RBN's ROKSO record and mentioned this sleight-of-hand.

However this didn't stop the word spreading in online news that RBN had moved to Chinese networks. Yes, China has huge spam and cybercrime hosting issues, but in this case there was no Chinese vector other than the fake company names and contact addresses.

A bit of good news is that only one of these new IP address ranges is currently visible on the internet. That one, "91.198.71.0/24", has no detectable web or DNS servers. However as the original RIPE allocations do not appear to have been revoked, the IP address ranges and routes could reappear, at any time, and traffic could appear to go to any destination on the Internet. As with all these spam and cybercrime hubs, Spamhaus recommends ISPs and networks use our Don't Route Or Peer list.

Spamhaus Information

Press Office
Spamhaus News Index
Spamhaus in the media
About Spamhaus
Spamhaus Official Statements
Article Information

Permanent link to this news article:
RBN as Chinese as Caviar & Borscht
http://www.spamhaus.org/news/article/617/rbn-as-chinese-as-caviar-borscht

Subscribe to RSS News Feed
Spamhaus News Quotes

Permission to quote from or reproduce Spamhaus News articles is granted automatically providing you state the source as Spamhaus and link to the news record.
© 1998-2023 The Spamhaus Project SLU. All rights reserved.
Legal  |  Privacy