Subscribe to RSS News Feed
About Spamhaus  |  Press Office  |  FAQs   
RBN as Chinese as Caviar & Borscht

2007-11-16 05:39:00 UTC   |   by Quentin Jenkins   |  
Recent News Articles

Spamhaus Botnet Threat Update: Q2-2021

Emotet Email Aftermath

Wordpress compromises: What's beyond the URL?

You can't buy data hygiene

Spamhaus Botnet Threat Update: Q1-2021

Good-bye, Blocklist Removal Center. Hello, IP and Domain Reputation Checker.

Using our public mirrors? Check your return codes now.

Emotet is disrupted, but the malware it installed lives on

Older News Articles:
Spamhaus News INDEX

When the routes to the older IP address mapped to the Russian Business network began to no longer route on the internet, Spamhaus noticed a new set of IP addresses and ASN numbers mapping into the same upstream network. The Whois data for these showed Chinese company names and .cn/.tw email addresses.

But just because you call yourself Chan does not mean you're not still Ivan. The IP addresses and ASN numbers were obtained from RIPE, the European RIR, who assured Spamhaus that the allocation 'was perfectly correct at the time it was made under existing RIPE rules and procedures'.

Spamhaus posted this data in RBN's ROKSO record and mentioned this sleight-of-hand.

However this didn't stop the word spreading in online news that RBN had moved to Chinese networks. Yes, China has huge spam and cybercrime hosting issues, but in this case there was no Chinese vector other than the fake company names and contact addresses.

A bit of good news is that only one of these new IP address ranges is currently visible on the internet. That one, "", has no detectable web or DNS servers. However as the original RIPE allocations do not appear to have been revoked, the IP address ranges and routes could reappear, at any time, and traffic could appear to go to any destination on the Internet. As with all these spam and cybercrime hubs, Spamhaus recommends ISPs and networks use our Don't Route Or Peer list.

Spamhaus Information

Press Office
Spamhaus News Index
Spamhaus in the media
About Spamhaus
Spamhaus Official Statements
Article Information

Permanent link to this news article:
RBN as Chinese as Caviar & Borscht

Subscribe to RSS News Feed
Spamhaus News Quotes

Permission to quote from or reproduce Spamhaus News articles is granted automatically providing you state the source as Spamhaus and link to the news record.
© 1998-2021 The Spamhaus Project SLU. All rights reserved.
Legal  |  Privacy